Hello
I have just installed ipa-server on ubuntu 18.04 and I have observed that the kadmin service is not running. While investigating the issue I’ve seen that is complaining about the not existance of the /etc/krb5kdc/kadm5.acl.
ipactl status Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: STOPPED httpd Service: RUNNING ipa-custodia Service: RUNNING pki-tomcatd Service: RUNNING ipa-otpd Service: RUNNING ipa: INFO: The ipactl command was successful
systemctl status krb5-admin-server.service ● krb5-admin-server.service - Kerberos 5 Admin Server Loaded: loaded (/lib/systemd/system/krb5-admin-server.service; disabled; vendor preset: enabled) Drop-In: /lib/systemd/system/krb5-admin-server.service.d └─slapd-before-kdc.conf Active: failed (Result: exit-code) since Thu 2019-06-20 16:36:34 EDT; 3min 9s ago Process: 13426 ExecStart=/usr/sbin/kadmind -nofork $DAEMON_ARGS (code=exited, status=1/FAILURE) Main PID: 13426 (code=exited, status=1/FAILURE)
Jun 20 16:36:34 ipadev.redcapcloud.com kadmind[13426]: setsockopt(11,IPV6_V6ONLY,1) worked Jun 20 16:36:34 ipadev.redcapcloud.com kadmind[13426]: Setting up RPC socket for address 0.0.0.0.749 Jun 20 16:36:34 ipadev.redcapcloud.com kadmind[13426]: Setting up RPC socket for address ::.749 Jun 20 16:36:34 ipadev.redcapcloud.com kadmind[13426]: setsockopt(13,IPV6_V6ONLY,1) worked Jun 20 16:36:34 ipadev.redcapcloud.com kadmind[13426]: set up 6 sockets Jun 20 16:36:34 ipadev.redcapcloud.com kadmind[13426]: No such file or directory while opening ACL file /etc/krb5kdc/kadm5.acl Jun 20 16:36:34 ipadev.redcapcloud.com kadmind[13426]: Cannot open /etc/krb5kdc/kadm5.acl: No such file or directory while initializing ACL file, aborting Jun 20 16:36:34 ipadev.redcapcloud.com kadmind[13426]: kadmind: kadmind: Cannot open /etc/krb5kdc/kadm5.acl: No such file or directory while initializing ACL file, aborting Jun 20 16:36:34 ipadev.redcapcloud.com systemd[1]: krb5-admin-server.service: Main process exited, code=exited, status=1/FAILURE Jun 20 16:36:34 ipadev.redcapcloud.com systemd[1]: krb5-admin-server.service: Failed with result 'exit-code’.
is there any way I can fix this?
regards, Peter