Hello
I have just installed ipa-server on ubuntu 18.04 and I have observed that the kadmin
service is not running. While investigating the issue I’ve seen that is complaining about
the not existance of the /etc/krb5kdc/kadm5.acl.
ipactl status
Directory Service: RUNNING
krb5kdc Service: RUNNING
kadmin Service: STOPPED
httpd Service: RUNNING
ipa-custodia Service: RUNNING
pki-tomcatd Service: RUNNING
ipa-otpd Service: RUNNING
ipa: INFO: The ipactl command was successful
systemctl status krb5-admin-server.service
● krb5-admin-server.service - Kerberos 5 Admin Server
Loaded: loaded (/lib/systemd/system/krb5-admin-server.service; disabled; vendor preset:
enabled)
Drop-In: /lib/systemd/system/krb5-admin-server.service.d
└─slapd-before-kdc.conf
Active: failed (Result: exit-code) since Thu 2019-06-20 16:36:34 EDT; 3min 9s ago
Process: 13426 ExecStart=/usr/sbin/kadmind -nofork $DAEMON_ARGS (code=exited,
status=1/FAILURE)
Main PID: 13426 (code=exited, status=1/FAILURE)
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/>
kadmind[13426]: setsockopt(11,IPV6_V6ONLY,1) worked
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/>
kadmind[13426]: Setting up RPC socket for address 0.0.0.0.749
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/>
kadmind[13426]: Setting up RPC socket for address ::.749
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/>
kadmind[13426]: setsockopt(13,IPV6_V6ONLY,1) worked
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/>
kadmind[13426]: set up 6 sockets
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/>
kadmind[13426]: No such file or directory while opening ACL file /etc/krb5kdc/kadm5.acl
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/>
kadmind[13426]: Cannot open /etc/krb5kdc/kadm5.acl: No such file or directory while
initializing ACL file, aborting
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/>
kadmind[13426]: kadmind: kadmind: Cannot open /etc/krb5kdc/kadm5.acl: No such file or
directory while initializing ACL file, aborting
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/> systemd[1]:
krb5-admin-server.service: Main process exited, code=exited, status=1/FAILURE
Jun 20 16:36:34
ipadev.redcapcloud.com <
http://ipadev.redcapcloud.com/> systemd[1]:
krb5-admin-server.service: Failed with result 'exit-code’.
is there any way I can fix this?
regards,
Peter