Re: smbk5pwd: unable to initialize krb5 admin context: failed to open /var/lib/heimdal-kdc/m-key: Permission denied (13).

[amg1127@cefetrs.tche.br]

Maybe permissions to /var/lib/heimdal-kdc are too restrictive to  
'openldap' user...
--
Anderson Medeiros Gomes
amg1127@cefetrs.tche.br

Coordenadoria de Manutenção e Redes
Centro Federal de Educação Tecnológica de Pelotas
http://www.cefetrs.tche.br/


Citando Bill Baird <billbaird3@gmail.com>:

> After many struggles getting smbk5pwd to work on CentOS, I have switched to
> Ubuntu LTS 8.04. I have heimdal-kdc installed as well as slapd. I was able
> to compile smbk5pwd and install it, but once I add the overlay to my
> config...I get this error when I try to start it.
>
> *....
> config_build_entry: "olcDatabase={-1}frontend"
> config_build_entry: "olcDatabase={0}config"
> config_build_entry: "olcDatabase={1}bdb"
> config_build_entry: "olcOverlay={0}smbk5pwd"
> backend_startup_one: starting "dc=phoenixmi,dc=com"
> bdb_db_open: DB_CONFIG for suffix "dc=phoenixmi,dc=com" has changed.
> Performing database recovery to activate new settings.
> bdb_db_open: database "dc=phoenixmi,dc=com": dbenv_open(/var/lib/ldap).
> smbk5pwd: unable to initialize krb5 admin context: failed to open
> /var/lib/heimdal-kdc/m-key: Permission denied (13).
> backend_startup_one: bi_db_open failed! (-1)
> slapd shutdown: initiated
> ====> bdb_cache_release_all
> slapd destroy: freeing system resources.
> slapd stopped.
> connections_destroy: nothing to destroy.*
>
> *I have made sure the /var/lib/heimdal-kdc/m-key file exists, and even made
> the file and directory have 777 permissions. Any ideas? Below is my
> slapd.conf config.*
>
> *include /etc/ldap/schema/core.schema
> include /etc/ldap/schema/cosine.schema
> include /etc/ldap/schema/inetorgperson.schema
> include /etc/ldap/schema/nis.schema
> include /etc/ldap/schema/samba.schema
> include /etc/ldap/schema/hdb.schema
>
> modulepath /usr/lib/ldap
> moduleload back_bdb
> moduleload smbk5pwd
>
> pidfile /var/run/slapd/slapd.pid
> argsfile /var/run/slapd/slapd.args
>
> database        bdb
> suffix          "dc=phoenixmi,dc=com"
> rootdn          "cn=manager,dc=phoenixmi,dc=com"
> rootpw          {SSHA}xxxxxxxxxx
> directory       /var/lib/ldap
> overlay         smbk5pwd
>
> ##just for testing
> access to *
>         by * write
> *
> Thank you, any help would be greatly appreciated!
>
> --Bill