On 12/22/2010 04:37 PM, Kevin Longfellow wrote:
> All three KDC's have messages like this around the same time:
>
> Dec 22 11:31:49 adczaa98 krb5kdc[3564](info): AS_REQ (1 etypes {1})
> 10.87.129.29: LOOKING_UP_CLIENT: \...@dev.com for krbtgt/dev....@dev.com, LDAP
> handle unavailable: Can't contact LDAP server
>
> I'm wondering if the principal coming through as \n may have caused this?
If RHEL using Mozilla NSS then it could be same as
https://bugzilla.redhat.com/show_bug.cgi?id=636956
You could try add "export NSS_STRICT_NOFORK=DISABLED" line to
/etc/sysconfig/krb5kdc and /etc/sysconfig/kadmin
Best regards,
Zoran Pericic
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
