Project

General

Profile

Bug #218

Active Directory - kerb5.conf not created correctly?

Added by survive - over 9 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Important
Assignee:
John Hixson
Category:
Middleware
Target version:
-
Seen in:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
Yes
Needs Doc:
Yes
Needs Merging:
Yes
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

Hi guys,

I just did a fresh install of RC-4. Configured the usual stuff like time zone, NIC setting & such then set up Active Directory. Started the service and got this message:

Mar 31 22:22:57 filer freenas: kinit: krb5_get_init_creds: unable to reach any KDC in realm MASTERRAVE.COM

Took a look at kerb5.conf and it looks like it's not being created correctly. For example, under "libdefaults" there is a line that looks like this:

default_realm = @UPPER_REALM@

I suspect that should actually be the name of my domain.

Attached is my complete kerb5.conf.

-Will

History

#1 Updated by John Hixson over 9 years ago

  • Status changed from Unscreened to Fix In Progress

#2 Updated by John Hixson over 9 years ago

Replying to [comment:1 jhixson]:

Hi Will,

Can you run the following command:

/usr/local/bin/freenas-debug -a

This will create the file /var/tmp/freenas-debug.txt

Can you upload or paste the output of that file to this ticket?

Thanks,

- John

#3 Updated by survive - over 9 years ago

Hi jhixson,

First, I must apologize as my original ticket was partially based on an error. I did a "find / | grep krb5" and took a look at the first file I saw that started with /etc & ended with krb5.conf....turns out that file was in /ix/templates which explains all the:

@STUFF@

entries in my example.

As you can see in my debug file it appears that krb5.conf is indeed looking ok. That said, the:

kinit: krb5_get_init_creds: unable to reach any KDC in realm MASTERRAVE.COM

error is still new behavior in RC-4.

Looking at my debug output it does look like AD is working...I can see my domain users & groups as I would expect, but that error is still new.

-Will

#4 Updated by John Hixson over 9 years ago

  • Status changed from Fix In Progress to Closed

Wrong krb5.conf file was being viewed.

#5 Avatar?id=14398&size=24x24 Updated by Kris Moore almost 5 years ago

Commit: 61051bd0ecb5690f90f958d996f3cb4b0f201f97
https://github.com/pcbsd/freebsd-ports/commit/61051bd0ecb5690f90f958d996f3cb4b0f201f97
Author: dbn <>
Date: 2015-12-16 (Wed, 16 Dec 2015)

Log Message:
-----------
sysutils/py-plumbum: update to 1.6.0

Port Changes:
- Add test target using nosetests.
- Switch to GH distribution to get unit tests.
- Add pkg-plist (do not use autoplist generation)

Change Log:
- Added support for Python 3.5, PyPy, and better Windows and Mac support, with
CI testing (#218, #217, #226)
- Colors: Added colors module, support for colors added to cli (#213)
- Machines: Added .get() method for checking several commands. (#205)
- Machines: local.cwd now is the current directory even if you change the
directory with non-Plumbum methods (fixes unexpected behavior).
(#207)
- SSHMachine: Better error message for SSH (#211)
- SSHMachine: Support for FreeBSD remote (#220)
- Paths: Now a subclass of str, can be opened directly (#228)
- Paths: Improved pathlib compatibility with several additions and renames
(#223)
- Paths: Added globbing multiple patterns at once (#221)
- Commands: added NOHUP modifier (#221)
- CLI: added positional argument validation (#225)
- CLI: added envname, which allows you specify an environment variable for a
SwitchAttr (#216)
- CLI terminal: addded Progress, a command line progress bar for iterators and
ranges (#214)
- CLI: add invoke, which allows you to programmatically run applications (#149)
- CLI: add --help-all and various cosmetic fixes: (#125), (#126), (#127)
- CLI: add root_app property (#141)
- Machines: getattr now raises AttributeError instead of CommandNotFound (#135)
- Paramiko: keep_alive support (#186)
- Paramiko: does not support piping explicitly now (#160)
- Parmaiko: Added pure SFTP backend, gives STFP v4+ support (#188)
- Paths: bugfix to cwd interaction with Path (#142)
- Paths: read/write now accept an optional encoding parameter (#148)
- Paths: Suffix support similar to the Python 3.4 standard library pathlib
(#198)
- Commands: renamed setenv to with_env (#143)
- Commands: pipelines will now fail with ProcessExecutionError if the source
process fails (#145)
- Commands: added TF and RETCODE modifiers (#202)
- Experimental concurrent machine support in experimental/parallel.py
- Several minor bug fixes, including Windows and Python 3 fixes (#199, #195)

#6 Avatar?id=14398&size=24x24 Updated by Kris Moore almost 5 years ago

Commit: 61051bd0ecb5690f90f958d996f3cb4b0f201f97
https://github.com/pcbsd/freebsd-ports/commit/61051bd0ecb5690f90f958d996f3cb4b0f201f97
Author: dbn <>
Date: 2015-12-16 (Wed, 16 Dec 2015)

Log Message:
-----------
sysutils/py-plumbum: update to 1.6.0

Port Changes:
- Add test target using nosetests.
- Switch to GH distribution to get unit tests.
- Add pkg-plist (do not use autoplist generation)

Change Log:
- Added support for Python 3.5, PyPy, and better Windows and Mac support, with
CI testing (#218, #217, #226)
- Colors: Added colors module, support for colors added to cli (#213)
- Machines: Added .get() method for checking several commands. (#205)
- Machines: local.cwd now is the current directory even if you change the
directory with non-Plumbum methods (fixes unexpected behavior).
(#207)
- SSHMachine: Better error message for SSH (#211)
- SSHMachine: Support for FreeBSD remote (#220)
- Paths: Now a subclass of str, can be opened directly (#228)
- Paths: Improved pathlib compatibility with several additions and renames
(#223)
- Paths: Added globbing multiple patterns at once (#221)
- Commands: added NOHUP modifier (#221)
- CLI: added positional argument validation (#225)
- CLI: added envname, which allows you specify an environment variable for a
SwitchAttr (#216)
- CLI terminal: addded Progress, a command line progress bar for iterators and
ranges (#214)
- CLI: add invoke, which allows you to programmatically run applications (#149)
- CLI: add --help-all and various cosmetic fixes: (#125), (#126), (#127)
- CLI: add root_app property (#141)
- Machines: getattr now raises AttributeError instead of CommandNotFound (#135)
- Paramiko: keep_alive support (#186)
- Paramiko: does not support piping explicitly now (#160)
- Parmaiko: Added pure SFTP backend, gives STFP v4+ support (#188)
- Paths: bugfix to cwd interaction with Path (#142)
- Paths: read/write now accept an optional encoding parameter (#148)
- Paths: Suffix support similar to the Python 3.4 standard library pathlib
(#198)
- Commands: renamed setenv to with_env (#143)
- Commands: pipelines will now fail with ProcessExecutionError if the source
process fails (#145)
- Commands: added TF and RETCODE modifiers (#202)
- Experimental concurrent machine support in experimental/parallel.py
- Several minor bug fixes, including Windows and Python 3 fixes (#199, #195)

Also available in: Atom PDF