Your message dated Fri, 21 Nov 2014 18:05:13 +0000 with message-id <[email protected]> and subject line Bug#769710: fixed in krb5 1.12.1+dfsg-15 has caused the Debian Bug report #769710, regarding krb5-admin-server: kadmind tries to start before LDAP is available (combined with krb5-kdc-ldap) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 769710: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769710 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: krb5-admin-server Version: 1.12.1+dfsg-14 Severity: normal Hi everybody, my system (Debian-LAN) combines krb5-kdc-ldap and kadmind on the same host. On startup, kadmind tries to contact slapd and fails, because slapd is not available yet: $ systemctl status krb5-admin-server ● krb5-admin-server.service - Kerberos 5 Admin Server Loaded: loaded (/lib/systemd/system/krb5-admin-server.service; enabled) Active: failed (Result: exit-code) since Sat 2014-11-15 18:10:32 CET; 12min ago Process: 897 ExecStart=/usr/sbin/kadmind -nofork $DAEMON_ARGS (code=exited, status=1/FAILURE) Main PID: 897 (code=exited, status=1/FAILURE) Nov 15 18:10:31 mainserver kadmind[897]: Couldn't open log file /var/log/krb5.log: Read-only file system Nov 15 18:10:32 mainserver kadmind[897]: Cannot bind to LDAP server 'ldapi://' as 'cn=kadmin,cn=kerberos,dc=intern': Can't contact LDAP server while initializing, aborting Nov 15 18:10:32 mainserver kadmind[897]: kadmind: Cannot bind to LDAP server 'ldapi://' as 'cn=kadmin,cn=kerberos,dc=intern': Can't contact LDAP server while initializing, aborting Nov 15 18:10:32 mainserver systemd[1]: krb5-admin-server.service: main process exited, code=exited, status=1/FAILURE Nov 15 18:10:32 mainserver systemd[1]: Unit krb5-admin-server.service entered failed state. I fixed the issue so far by adding the directory '/lib/system/krb5-admin-server.service.d/' containing the file 'kdc-before-admind.conf' with: [Unit] After=krb5-kdc.service This is comparable to the fix for krb5-kdc-ldap (cf. '/lib/system/krb5-kdc.service.d/'). It would be great if the setup would work out of the box, i.e. if a krb5-kdc.service is on the same host, start krb5-admin-server.service after krb5-kdc.service. Many thanks and best regards, Andi -- System Information: Debian Release: jessie/sid APT prefers testing-updates APT policy: (500, 'testing-updates'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages krb5-admin-server depends on: ii debconf [debconf-2.0] 1.5.53 ii init-system-helpers 1.21 ii krb5-kdc 1.12.1+dfsg-14 ii libc6 2.19-13 ii libcomerr2 1.42.12-1 ii libgssapi-krb5-2 1.12.1+dfsg-14 ii libgssrpc4 1.12.1+dfsg-14 ii libk5crypto3 1.12.1+dfsg-14 ii libkadm5srv-mit9 1.12.1+dfsg-14 ii libkdb5-7 1.12.1+dfsg-14 ii libkeyutils1 1.5.9-5 ii libkrb5-3 1.12.1+dfsg-14 ii libkrb5support0 1.12.1+dfsg-14 ii libss2 1.42.12-1 ii libverto1 0.2.4-1 ii lsb-base 4.1+Debian13+nmu1 krb5-admin-server recommends no packages. krb5-admin-server suggests no packages. -- debconf information: * krb5-admin-server/kadmind: true krb5-admin-server/newrealm:
--- End Message ---
--- Begin Message ---Source: krb5 Source-Version: 1.12.1+dfsg-15 We believe that the bug you reported is fixed in the latest version of krb5, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Benjamin Kaduk <[email protected]> (supplier of updated krb5 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 21 Nov 2014 12:36:08 -0500 Source: krb5 Binary: krb5-user krb5-kdc krb5-kdc-ldap krb5-admin-server krb5-multidev libkrb5-dev libkrb5-dbg krb5-pkinit krb5-otp krb5-doc libkrb5-3 libgssapi-krb5-2 libgssrpc4 libkadm5srv-mit9 libkadm5clnt-mit9 libk5crypto3 libkdb5-7 libkrb5support0 libkrad0 krb5-gss-samples krb5-locales libkrad-dev Architecture: source all amd64 Version: 1.12.1+dfsg-15 Distribution: unstable Urgency: medium Maintainer: Sam Hartman <[email protected]> Changed-By: Benjamin Kaduk <[email protected]> Description: krb5-admin-server - MIT Kerberos master server (kadmind) krb5-doc - Documentation for MIT Kerberos krb5-gss-samples - MIT Kerberos GSS Sample applications krb5-kdc - MIT Kerberos key server (KDC) krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin krb5-locales - Internationalization support for MIT Kerberos krb5-multidev - Development files for MIT Kerberos without Heimdal conflict krb5-otp - OTP plugin for MIT Kerberos krb5-pkinit - PKINIT plugin for MIT Kerberos krb5-user - Basic programs to authenticate using MIT Kerberos libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library libkadm5clnt-mit9 - MIT Kerberos runtime libraries - Administration Clients libkadm5srv-mit9 - MIT Kerberos runtime libraries - KDC and Admin Server libkdb5-7 - MIT Kerberos runtime libraries - Kerberos database libkrad-dev - MIT Kerberos RADIUS Library Development libkrad0 - MIT Kerberos runtime libraries - RADIUS library libkrb5-3 - MIT Kerberos runtime libraries libkrb5-dbg - Debugging files for MIT Kerberos libkrb5-dev - Headers and development libraries for MIT Kerberos libkrb5support0 - MIT Kerberos runtime libraries - Support library Closes: 769710 Changes: krb5 (1.12.1+dfsg-15) unstable; urgency=medium . * Also apply slapd-before-kdc.conf to krb5-admin-server.service.d, Closes: #769710 Checksums-Sha1: d6975b6364df30cc97990736a8449d1089386867 3173 krb5_1.12.1+dfsg-15.dsc 08bb02bd61c8327b8902ffb897dada11e564ea0f 106208 krb5_1.12.1+dfsg-15.debian.tar.xz f9074c8a87e648f3768d0526ac1a7e11c76ffa7f 4687470 krb5-doc_1.12.1+dfsg-15_all.deb bf60dd4bb1a667507762c3be60af6b3945f20e67 2647950 krb5-locales_1.12.1+dfsg-15_all.deb ca2b54b6dc76025a731256c6e47d097a4a6bf7a9 136532 krb5-user_1.12.1+dfsg-15_amd64.deb 6b74b9d5875c7f3eabe963b12f735f081528b0ba 208724 krb5-kdc_1.12.1+dfsg-15_amd64.deb afbc3a1429022abfe5d9b1fe48205ecca9318893 110452 krb5-kdc-ldap_1.12.1+dfsg-15_amd64.deb 49e799c1cf69450bdcf783f34188d7b46711ee1f 112872 krb5-admin-server_1.12.1+dfsg-15_amd64.deb ed1fc36859876dca29a9139a1e37acbce599440b 144298 krb5-multidev_1.12.1+dfsg-15_amd64.deb 73dd755efbdd3b6e0d6bf4762bdf6fc09589c1a4 41904 libkrb5-dev_1.12.1+dfsg-15_amd64.deb e9d7d8f7fc7fa7ae0bce4bbce47e45a7cd6a7cc8 1421374 libkrb5-dbg_1.12.1+dfsg-15_amd64.deb 94ac7b4633bac9831e1e71404f54665a57b0b4ac 83132 krb5-pkinit_1.12.1+dfsg-15_amd64.deb 3284e08f65d554193ec39d64caf65565a9ff7e79 47530 krb5-otp_1.12.1+dfsg-15_amd64.deb d60ee456c5f64e38181bbc72666385dc21fb8736 302020 libkrb5-3_1.12.1+dfsg-15_amd64.deb 7fd90b6c985fbb1571ca9f515e678fe2bcf264bc 150070 libgssapi-krb5-2_1.12.1+dfsg-15_amd64.deb 524cd0f4450c1a17a25064e3c985adb133dd9b9f 85548 libgssrpc4_1.12.1+dfsg-15_amd64.deb 9e0a53b33654291839c26637298f59f4adf4ff4f 82192 libkadm5srv-mit9_1.12.1+dfsg-15_amd64.deb 1f43bde326a7ffdba01acadb25068191d4d47439 67704 libkadm5clnt-mit9_1.12.1+dfsg-15_amd64.deb 02df26041384888a6c02b545ee5aa945c4fbf412 114398 libk5crypto3_1.12.1+dfsg-15_amd64.deb e943a081c650ad80e93d0e852a4330c3e7dec018 67786 libkdb5-7_1.12.1+dfsg-15_amd64.deb 0ada321ad2c8b493510629b42df2f4cdaef6cbfd 58352 libkrb5support0_1.12.1+dfsg-15_amd64.deb 7fc0564e692921a2351d96c5d0414ae79697125a 51972 libkrad0_1.12.1+dfsg-15_amd64.deb 8a9e7749694fbd50a6e17197d8863e4e8e5ee70f 55184 krb5-gss-samples_1.12.1+dfsg-15_amd64.deb 0b6c213cb577d9a792143b7327ed11f6d255316e 42372 libkrad-dev_1.12.1+dfsg-15_amd64.deb Checksums-Sha256: ac9830eeab52ef5a96955999e949ef6d9b6fd52327a3a68c78c8e941ccdbaec7 3173 krb5_1.12.1+dfsg-15.dsc 6722eded147751a48a7bf7d47c18812bc2fcd34075cfb423ebaf8a65e8844f30 106208 krb5_1.12.1+dfsg-15.debian.tar.xz d29c432169cdc8ec8fd1a4594791cce6e1cd2bfda19cd3d74c23716ba119edf8 4687470 krb5-doc_1.12.1+dfsg-15_all.deb 32d42b9dcf48f583749670c676a60f24fd8026c0a85943bba4ee5b97ef919ea1 2647950 krb5-locales_1.12.1+dfsg-15_all.deb 84d42ced2432b3db5194fc3255f40a6e1291b4bf2549ef5d7afc7a4bcc10d9ff 136532 krb5-user_1.12.1+dfsg-15_amd64.deb 44da0eec277bfa81a33e24319482cebbcb9894c6f57f018edcb7cb99d32bb301 208724 krb5-kdc_1.12.1+dfsg-15_amd64.deb f3e802f77eb364315565fc8d73b52cc86bb04ac273aba87f0e5bcc7d7db4f74f 110452 krb5-kdc-ldap_1.12.1+dfsg-15_amd64.deb e25ec56807c2aa223834b94157e0f0083d38bffb77226649817087dae2f54260 112872 krb5-admin-server_1.12.1+dfsg-15_amd64.deb 4433beca92223a173eed6fab61f0299729eabdd10c4fe0c07c9e0b2f5bfafafd 144298 krb5-multidev_1.12.1+dfsg-15_amd64.deb ad2f1e414c65479a2f02081074e9d4dabc86725d2bbf1f360f59ae19742b79ca 41904 libkrb5-dev_1.12.1+dfsg-15_amd64.deb 0ede56fd0cc521be41aa823130656688178feea82e2c09ce5e003a37de55f52a 1421374 libkrb5-dbg_1.12.1+dfsg-15_amd64.deb c5c440ec62a51732e6695ea92512230d9b13d909e4c8d28964391ca91991ebc5 83132 krb5-pkinit_1.12.1+dfsg-15_amd64.deb ac04b577f8918974fa3ac567c6d3fefe38017aa1c4fbccff357b8d13a87f6791 47530 krb5-otp_1.12.1+dfsg-15_amd64.deb 521ea26f47d20ef688116e0d8fa50b3cb1c12e4e40be008852b578f1d0bf75fd 302020 libkrb5-3_1.12.1+dfsg-15_amd64.deb 6b0ebf20fda0fb9556ebee5ca83e6a1607147068de471c2b6b4f16253ad1398f 150070 libgssapi-krb5-2_1.12.1+dfsg-15_amd64.deb d8d16feac59b08c4b74af5d9b80e999463c0ba6eedf835114fdf8cb5a0d7352c 85548 libgssrpc4_1.12.1+dfsg-15_amd64.deb c16ab222cf59d3bf6873529182e7adcfcfc6f2c54901f155e603e61ecee8f809 82192 libkadm5srv-mit9_1.12.1+dfsg-15_amd64.deb a9033bdff525b5a53475c105080a4fbd00d72a1f6b36225dabd97dcb67f9e5a4 67704 libkadm5clnt-mit9_1.12.1+dfsg-15_amd64.deb 23e00ff720ef71b7c764fb7563ab1dcf8cd2368a023864bcf09422b4e2781266 114398 libk5crypto3_1.12.1+dfsg-15_amd64.deb 10f0cf76ad5bbcec4c8fcbc8d56eef7d9a7e060d960c134c467cf1d4f979b03f 67786 libkdb5-7_1.12.1+dfsg-15_amd64.deb 6dbd783e5c54628f53d6d75977dbc3d93ede0084459ebad0620072168d05738d 58352 libkrb5support0_1.12.1+dfsg-15_amd64.deb 0f0f5264450f9613cf1f81350e48abbb4413a121cd79b8a9830af58bc5499fa0 51972 libkrad0_1.12.1+dfsg-15_amd64.deb 15d763a8bad9af7d27a214301df4a719e775123fc18d3accaf5264ffb95871fd 55184 krb5-gss-samples_1.12.1+dfsg-15_amd64.deb 208c51d179b04788787f1a537878e8ab49204a7ff009343f242db07e7b68e287 42372 libkrad-dev_1.12.1+dfsg-15_amd64.deb Files: aa6a78473be820a5436790b457d17b1f 3173 net standard krb5_1.12.1+dfsg-15.dsc 72c382b16dbd03366672b8846128f7f0 106208 net standard krb5_1.12.1+dfsg-15.debian.tar.xz 05faffa1e0f169346992babc73fd4e86 4687470 doc optional krb5-doc_1.12.1+dfsg-15_all.deb 962065bb5ea59de3219f16731718be27 2647950 localization standard krb5-locales_1.12.1+dfsg-15_all.deb 567843f933ebd8bb8e44e1ba55a87bf4 136532 net optional krb5-user_1.12.1+dfsg-15_amd64.deb 1e5e5e1c2d0a1f47684322ca9daa0101 208724 net optional krb5-kdc_1.12.1+dfsg-15_amd64.deb 14fc1411bf6da02803b4d072ccf72f8a 110452 net extra krb5-kdc-ldap_1.12.1+dfsg-15_amd64.deb 19b303aba4301df883717258f0b02e7c 112872 net optional krb5-admin-server_1.12.1+dfsg-15_amd64.deb f49587c397cdb390dd96411aef32c657 144298 libdevel optional krb5-multidev_1.12.1+dfsg-15_amd64.deb 5c26c62557f917638cc66ac3bae77489 41904 libdevel extra libkrb5-dev_1.12.1+dfsg-15_amd64.deb 1420e092a82285e09bd2c7c7e1748a07 1421374 debug extra libkrb5-dbg_1.12.1+dfsg-15_amd64.deb ed4f00f110438cc01a8cc3023e878d5e 83132 net extra krb5-pkinit_1.12.1+dfsg-15_amd64.deb 88a44e37961a97f9ee2325c10373c200 47530 net extra krb5-otp_1.12.1+dfsg-15_amd64.deb ac8ab8b7be8e70186732a9b42fd9be47 302020 libs standard libkrb5-3_1.12.1+dfsg-15_amd64.deb 199303dc26cfe892d973a325a8433d8c 150070 libs standard libgssapi-krb5-2_1.12.1+dfsg-15_amd64.deb 1fbcac27595674857ae80883bfe8eb08 85548 libs standard libgssrpc4_1.12.1+dfsg-15_amd64.deb 276b93fbe003ca3ab2c6f15ecd0c3d29 82192 libs standard libkadm5srv-mit9_1.12.1+dfsg-15_amd64.deb 8f45315882d191a0cb744c03b3c1347a 67704 libs standard libkadm5clnt-mit9_1.12.1+dfsg-15_amd64.deb 751ea1fd6631e6cf7d9ea30785c56eee 114398 libs standard libk5crypto3_1.12.1+dfsg-15_amd64.deb a6bc21066d1e0828389215fd3b16e0af 67786 libs standard libkdb5-7_1.12.1+dfsg-15_amd64.deb 69e4a76e016b6a5e0c046dc347ca485b 58352 libs standard libkrb5support0_1.12.1+dfsg-15_amd64.deb ea03c35a60c49c91e20538d9c711cd03 51972 libs standard libkrad0_1.12.1+dfsg-15_amd64.deb c88f27878e500d96f755924369b0d472 55184 net extra krb5-gss-samples_1.12.1+dfsg-15_amd64.deb 113b7ead7fa2c9874dcb4daf395ace9c 42372 libdevel extra libkrad-dev_1.12.1+dfsg-15_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQGgBAEBCgAGBQJUb3m8AAoJECjZpvNk63USc6cMH3uza+t9PjOricN5+Knot3Gj LzvOYw8bG+zj1aE8WZqdx8ldOwC4XJJyp8q/+o35vlDTOyxoy5PRz9GRDgRwbrBn 3xJNwhrgVwdmXYP2g+ys/7BjI2M1zJ6rhpDX0rKdMhV2RQgUuZW9vuvdT9pbsNoN oQrjnk1YTmc6RyEGpol3fOwSbpDsMez5oTaXanCJGoYvImmCqcgqXJ/Aie3LwbCi LgRqRaSYFZjm72aEifDXjr30pgNm291FDgifnd5WrhdZhF5Zz0qhstgIBFdN4j8o YWig68GUKf9fxvIHnm9A8HIEPU7vbEDDV/ZflGPlB1AZGM7fxypgkwd/GQaggDWR tQmRo+1PSkRJNJp3jyMRiQqqao69Ua0HiHgZf+FwSXphzUAMxBvIBL98L6J3eqrs XW5nzeQJ3M0sNhKXNCKaBb1p4cT57vlMp1aBWoJGjT7IocQeyQWU/GYmA3XpChq3 KtwSu82+d4a/+AFrRyngcID8vhdwWXMyj16y+qTK/lYq7qs= =chc+ -----END PGP SIGNATURE-----
--- End Message ---
