Package: krb5-kdc
Version: 1.12.1+dfsg-19+deb8u2
Severity: normal
Dear Maintainer,
a few days ago we upgraded our KDC server from squeeze to jessie. Since
then the first slave KDC sometimes reported an error during database
propagation, maybe two or three times a day, probably during times of
heavy usage.
To get more information I started kpropd in debug mode. When the error
occurs I get the following lines:
[...]
Full propagation transfer started.
Full propagation transfer finished.
calling kdb5_util to load database
Load PID is 20249
kdb5_util: Resource temporarily unavailable while making newly loaded database
live
kdb5_util: Invalid argument while deleting bad database
/var/lib/krb5kdc/principal
kpropd: /usr/sbin/kdb5_util returned a bad exit status (1)
Database load process for full propagation completed.
>From the source I found out that this error is thrown at
src/kadmin/dbutil/dump.c:
ret = krb5_db_promote(util_context, db5util_db_args);
/* Ignore a not supported error since there is nothing to do about it
* anyway. */
if (ret != 0 && ret != KRB5_PLUGIN_OP_NOTSUPP) {
com_err(progname, ret,
_("while making newly loaded database live"));
goto error;
}
So from my understanding there must be some kind of locking problem
between krb5_db_promote() and the normal KDC operations.
Has anyone experienced these error messages as well?
Thanks,
Christopher
-- System Information:
Debian Release: 8.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages krb5-kdc depends on:
ii debconf [debconf-2.0] 1.5.56
ii init-system-helpers 1.22
ii krb5-config 2.3
ii krb5-user 1.12.1+dfsg-19+deb8u2
ii libc6 2.19-18+deb8u3
ii libcomerr2 1.42.12-1.1
ii libgssapi-krb5-2 1.12.1+dfsg-19+deb8u2
ii libgssrpc4 1.12.1+dfsg-19+deb8u2
ii libk5crypto3 1.12.1+dfsg-19+deb8u2
ii libkadm5clnt-mit9 1.12.1+dfsg-19+deb8u2
ii libkadm5srv-mit9 1.12.1+dfsg-19+deb8u2
ii libkdb5-7 1.12.1+dfsg-19+deb8u2
ii libkeyutils1 1.5.9-5+b1
ii libkrb5-3 1.12.1+dfsg-19+deb8u2
ii libkrb5support0 1.12.1+dfsg-19+deb8u2
ii libverto-libev1 0.2.4-2
ii libverto1 0.2.4-2
ii lsb-base 4.1+Debian13+nmu1
krb5-kdc recommends no packages.
Versions of packages krb5-kdc suggests:
pn krb5-admin-server <none>
pn krb5-kdc-ldap <none>
ii xinetd [inet-superserver] 1:2.3.15-3
-- debconf information excluded
