[Freeipa-devel] ipadb.so

[Simo Sorce]

On Tue, 2013-09-10 at 11:24 +0430, Mahmoud wrote:
> Hello,
> 
> 
> I installed Fedora 19.
> Each time I change /usr/sbin/krb5kdc, it will not start again. I get
> following error:
> krb5kdc: Server error - while fetching master key K/M for realm
> EXAMPLE.COM
> 
If you get this error it means your krb5kdc binary does not find nor
loads ipadb.so

> Via reinstalling IPA, the problem will be fixed but I would like to
> fix it without reinstalling IPA.

What I suspect is happening is that by reinstalling IPA you get a bdb
based database in kerberos. That will not work.

>  When I reinstalled IPA, all previous stored data has been deleted.
> Is there any way to reconfigure Kerberos without deleting database
> data?

No, there is no need to 'reconfigure kerberos', it's already configured
properly in LDAP, krb5.conf and kdc.conf, you are just replacing a
binary, if you get errors it's because you failed to properly build the
binary. I strongly suggest, if you really need to, that you build the
new binary as an rpm so that all ./configure options are correct for the
target machine.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York