From owner-freebsd-security Sat Jan 26 20:22:23 2002 Delivered-To: freebsd-security@freebsd.org Received: from mail.tgd.net (mail.tgd.net [209.81.25.10]) by hub.freebsd.org (Postfix) with ESMTP id 6376937B404 for ; Sat, 26 Jan 2002 20:22:21 -0800 (PST) Received: by mail.tgd.net (Postfix, from userid 1001) id 7CD6D20F0A; Sat, 26 Jan 2002 20:22:20 -0800 (PST) Date: Sat, 26 Jan 2002 20:22:20 -0800 From: Sean Chittenden To: freebsd-security@freebsd.org Subject: Re: MIT Kerberos kadmind unable to start... [RESOLVED] Message-ID: <20020126202220.G8408@ninja1.internal> References: <20020126200944.E8408@ninja1.internal> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <20020126200944.E8408@ninja1.internal>; from "sean@chittenden.org" on Sat, Jan 26, 2002 at = 08:09:44PM X-PGP-Key: 0x1EDDFAAD X-PGP-Fingerprint: C665 A17F 9A56 286C 5CFB 1DEA 9F4F 5CEF 1EDD FAAD X-Web-Homepage: http://sean.chittenden.org/ Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > I just upgraded to 1.2.3 and thought it'd be a nice idea to kill and > restart the new kadmin and krb5kdc's, however, now I'm getting the > following error: > > # /usr/local/sbin/kadmind > kadmind: Cannot set GSS-API authentication names. > kadmind in free(): warning: chunk is already free > kadmind in free(): warning: chunk is already free Somehow I managed to zero out the kadmind.keytab's (scratches head). The following fixed the problem: kadmin.local: ktadd -k /usr/local/var/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw kadmin.local: q host# /usr/local/sbin/kadmind ktrace is sweet. Sorry for responding to my own question. -sc -- Sean Chittenden To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message