Return-Path: 
 <users-return-2180-apmail-directory-users-archive=directory.apache.org@directory.apache.org>
Delivered-To: apmail-directory-users-archive@www.apache.org
Received: (qmail 66534 invoked from network); 23 Feb 2009 16:22:00 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 23 Feb 2009 16:22:00 -0000
Received: (qmail 5339 invoked by uid 500); 23 Feb 2009 16:21:59 -0000
Delivered-To: apmail-directory-users-archive@directory.apache.org
Received: (qmail 5304 invoked by uid 500); 23 Feb 2009 16:21:59 -0000
Mailing-List: contact users-help@directory.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@directory.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@directory.apache.org>
List-Post: <mailto:users@directory.apache.org>
List-Id: <users.directory.apache.org>
Reply-To: users@directory.apache.org
Delivered-To: mailing list users@directory.apache.org
Received: (qmail 5293 invoked by uid 99); 23 Feb 2009 16:21:59 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 23 Feb 2009 08:21:59 -0800
X-ASF-Spam-Status: No, hits=2.4 required=10.0
	tests=HTML_MESSAGE,SPF_PASS,URIBL_GREY
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: local policy)
Received: from [169.130.94.126] (HELO mail.openroadsconsulting.com)
 (169.130.94.126)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 23 Feb 2009 16:21:50 +0000
X-Spam-Level: 
Received: from [127.0.0.1] ([172.30.30.17])
	(authenticated user drrobison@openroadsconsulting.com)
	by mail.openroadsconsulting.com (Kerio MailServer 6.5.2)
	for users@directory.apache.org;
	Mon, 23 Feb 2009 11:24:22 -0500
Message-ID: <49A2CCFC.8050407@openroadsconsulting.com>
Date: Mon, 23 Feb 2009 11:21:16 -0500
From: David R Robison <drrobison@openroadsconsulting.com>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: users@directory.apache.org
Subject: Re: Problems setting up ApacheDS 1.5.4 as a Kerberos Server
References: <498AFE3A.7050406@vogon.net>
	 <d45b08f00902200821r7640ef67jf09fde67eb5e448b@mail.gmail.com>
	 <499ED8D7.9010200@openroadsconsulting.com>
	 <d45b08f00902200850h18740829hc640af4d5296a753@mail.gmail.com>
	 <49A2AC73.4070305@openroadsconsulting.com>
	 <98d8c0860902230614n1548c1e3te05d1b661b8942c@mail.gmail.com>
	 <49A2B297.6030904@openroadsconsulting.com>
	 <98d8c0860902230641p1dce8c37u763fe1bd8b9439ea@mail.gmail.com>
	 <49A2C51F.1040902@openroadsconsulting.com>
	 <49A2CA9A.6090300@openroadsconsulting.com>
 <d45b08f00902230816i4f6393b8q7742950cf15af980@mail.gmail.com>
In-Reply-To: <d45b08f00902230816i4f6393b8q7742950cf15af980@mail.gmail.com>
Content-Type: multipart/alternative;
 boundary="------------070903010307060101030409"
X-Virus-Checked: Checked by ClamAV on apache.org
X-Old-Spam-Status: No, hits=0.0 required=5.0
	tests=AWL: -0.053,BAYES_00: -1.665,HTML_30_40: 0.374,
	HTML_MESSAGE: 0.001,HTML_TITLE_EMPTY: 0.214,TOTAL_SCORE: -1.129

--------------070903010307060101030409
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

I have. I also tried to give the kdcServer an Id and reference it in the 
apacheDS element:

  <kdcServer id="kdcServer">
    <tcpTransport>
      <tcpTransport port="88" nbThreads="4" backLog="50"/>
    </tcpTransport>
    <udpTransport>
      <udpTransport port="88" nbThreads="4" backLog="50"/>
    </udpTransport>
    <directoryService>#directoryService</directoryService>
  </kdcServer>
...
  <apacheDS id="apacheDS"
            synchPeriodMillis="15000"
            allowAnonymousAccess="false">

    <directoryService>#directoryService</directoryService>
    <ldapService>#ldapService</ldapService>
    <ldapsService>#ldapsService</ldapsService>
    <kdcServer>#kdcServer</kdcServer>
       
    <!-- We load the orci root context entry here -->
    <ldifDirectory>../instances/default/conf/orciRoot.ldif</ldifDirectory>
  </apacheDS>

but then it complains that the kdcServer is not a valid property of the 
apacheDS element. My guess is that the kdcServer needs to be references 
somewhere else, but I'm not sure where. David

Emmanuel Lecharny wrote:
> On Mon, Feb 23, 2009 at 5:11 PM, David R Robison
> <drrobison@openroadsconsulting.com> wrote:
>   
>> I copied the following files to the lib directory of the DS install and
>> restarted the server.
>> bcprov-ext-jdk16-141.jar
>> bcprov-jdk16-141.jar
>> Things seem to run OK, but the Kerberos server still does not seem to want
>> to start up. Here is the log.
>>     
>
> Have you uncommented the kerberos part in the server.xml file ?
>
>   <!--
>   +============================================================+
>   | Kerberos server configuration                              |
>   +============================================================+
>   -->
>   <!--  missing atou=users,dc=example,dc=com
> <--------------------- here, remove the starting comment
>   <kdcServer>
>     <tcpTransport>
>       <tcpTransport port="60088" nbThreads="4" backLog="50"/>
>     </tcpTransport>
>     <udpTransport>
>       <udpTransport port="60088" nbThreads="4" backLog="50"/>
>     </udpTransport>
>     <directoryService>#directoryService</directoryService>
>   </kdcServer>
> -->
>
> I must tell you that the Kerberos server is really in an hazardous
> state, atm. It _may_ work, but there are no guarantee :/
>
>   

-- 

David R Robison
Open Roads Consulting, Inc.
103 Watson Road, Chesapeake, VA 23320
phone: (757) 546-3401
e-mail: drrobison@openroadsconsulting.com
web: http://openroadsconsulting.com
blog: http://therobe.blogspot.com
book: http://www.xulonpress.com/book_detail.php?id=2579

This e-mail communication (including any attachments) may contain confidential and/or privileged material intended solely for the individual or entity to which it is addressed.  If you are not the intended recipient, you should immediately stop reading this message and delete it from all computers that it resides on. Any unauthorized reading, distribution, copying or other use of this communication (or its attachments) is strictly prohibited.  If you have received this communication in error, please notify us immediately.  



 


--------------070903010307060101030409--