Bug 31635 – /etc/krb5.keytab missing

Bug 31635 - /etc/krb5.keytab missing


Summary:	/etc/krb5.keytab missing

Status:	CLOSED DUPLICATE of bug 31725

Product:	UCS
Classification:	Unclassified
Component:	Samba4
Version:	UCS 3.1
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 3.1-1-errata
Assigned To:	Stefan Gohmann
QA Contact:	Arvid Requate

URL:
Keywords:	interim-3

Depends on:	27426
Blocks:
	Show dependency tree / graph

Reported:	2013-06-04 14:57 CEST by Janis Meybohm
Modified:	2013-07-25 09:28 CEST (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Janis Meybohm

2013-06-04 14:57:45 CEST

+++ This bug was initially created as a clone of Bug #27426 +++

Some customers reported that the /etc/krb5.keytab disappeared from Samba 4 DCs.
The next server password change recreates the keytab but the "old" keys are missing which leads to the "kvno" messages:  

 Failed to find xyz$@abc.LOCAL(kvno N) in keytab FILE:/etc/krb5.keytab (arcfour-hmac-md5)



The keytab can be recreated using the following commands:
eval "$(ucr shell)"
echo -e "dn: flatname=$windows_domain,cn=Primary Domains\nchangetype: modify\nreplace: krb5Keytab\nkrb5Keytab: /tmp/krb5.keytab" | ldbmodify -H /var/lib/samba/private/secrets.ldb
echo -e "dn: flatname=$windows_domain,cn=Primary Domains\nchangetype: modify\nreplace: krb5Keytab\nkrb5Keytab: /etc/krb5.keytab" | ldbmodify -H /var/lib/samba/private/secrets.ldb

Comment 1 Stefan Gohmann

2013-07-15 18:57:06 CEST

It looks like a duplicate of Bug #31725. If it occurs again with errata130, please reopen.

*** This bug has been marked as a duplicate of bug 31725 ***

Comment 2 Arvid Requate

2013-07-15 20:53:31 CEST

Yes, that's how we initially came to suspect that Bug 31725 existed. Brilliant, fixes this and a host of yet unknown bugs..

Comment 3 Moritz Muehlenhoff

2013-07-25 09:28:24 CEST

No errata release needed.