[gorickey]

Anybody know how to turn on KDC (Kerberos) if it suddenly becomes stopped and you can't authenticate to the machine using OSXS Panther? Terminal command or anything? I don't see anything through the GUI that just flips it back on...

Thanks.

[[APi]TheMan]

Originally posted by gorickey:
Anybody know how to turn on KDC (Kerberos) if it suddenly becomes stopped and you can't authenticate to the machine using OSXS Panther? Terminal command or anything? I don't see anything through the GUI that just flips it back on...

Thanks.

You can't log on locally to the server itself?

[gorickey]

Originally posted by [APi]TheMan:
You can't log on locally to the server itself?

You can log on locally; however, you can't authenticate to the ODM (Open Directory Master) at that point.

Kerberos (KDC) must be up and running anyway.

Any idea?

[CatOne]

Originally posted by gorickey:
Anybody know how to turn on KDC (Kerberos) if it suddenly becomes stopped and you can't authenticate to the machine using OSXS Panther? Terminal command or anything? I don't see anything through the GUI that just flips it back on...

Thanks.

Did you monkey with DNS settings at all?

Anyway, to address this, try setting Open Directory to "standalone server" (via Server Admin), and then changing it back to "Open Directory Master." If your DNS is properly set up, this will cause the KDC to start back up.

[gorickey]

Originally posted by CatOne:
Did you monkey with DNS settings at all?

Anyway, to address this, try setting Open Directory to "standalone server" (via Server Admin), and then changing it back to "Open Directory Master." If your DNS is properly set up, this will cause the KDC to start back up.

You know, come to think of it, another person did fix some reverse lookup things on the DNS side a few weeks ago. Could that have done it by chance? How does that break KDC?

I'll try your suggestion and try to let you know as well if it worked.

Thanks!

[gorickey]

Originally posted by CatOne:
Anyway, to address this, try setting Open Directory to "standalone server" (via Server Admin), and then changing it back to "Open Directory Master." If your DNS is properly set up, this will cause the KDC to start back up.

Before trying this, I assume this isn't going to jack up anything by simply switching this back and forth? Like the LDAP database won't be erased if I make it a Standalone, and then back to an ODM immediately?

Just confirming.

[CatOne]

Originally posted by gorickey:
Before trying this, I assume this isn't going to jack up anything by simply switching this back and forth? Like the LDAP database won't be erased if I make it a Standalone, and then back to an ODM immediately?

Just confirming.

It won't jack anything, no. You won't be able to access/log in as the LDAP users while it's turned off, of course.

It was probably the reverse DNS changes that screwed things up. That can affect lookups in strange ways..

[gorickey]

Originally posted by CatOne:
It won't jack anything, no. You won't be able to access/log in as the LDAP users while it's turned off, of course.

It was probably the reverse DNS changes that screwed things up. That can affect lookups in strange ways..

Thanks for the confirmation, I'll give it a go and see how it goes...

Thanks yet again.

[[APi]TheMan]

Ah, DNS is evil, it does weird things to LDAP if its mucked with after you bind... It's a rather infamous feature of OS X Server. Fortunately Panther comes with the changeip command which previous incarnations didn't have. I hope that fixes your problem...

[gorickey]

Everything is back and working again...it worked!

Thanks for all the help.

I hope Apple can incorporate a better "GUI" for KDC (starting/stopping) in a future version of the OS...

[gorickey]

Everything is back and working again...it worked!

Thanks for all the help.

I hope Apple can incorporate a better "GUI" for KDC (starting/stopping) in a future version of the OS...

[gorickey]

Everything is back and working again...it worked!

Thanks for all the help.

I hope Apple can incorporate a better "GUI" for KDC (starting/stopping) in a future version of the OS...

[gorickey]

Everything is back and working again...it worked!

Thanks for all the help.

I hope Apple can incorporate a better "GUI" for KDC (starting/stopping) in a future version of the OS...

[gorickey]

Major database burps...

YIKES!