[Bug 652433] Re: Init script dependency error: krb5-kdc starts before slapd

[Ryan Tandy]

I have noticed that the slapd init script terminates before slapd is
actually ready to accept connections, and I think that is the problem
you're having too.  In my scripts that stop/start slapd I always have to
insert a 'sleep 1' before I can do any LDAP operations.  I've also
noticed that on a sufficiently fast machine the time between S17slapd
and S18krb5-kdc is short enough that the KDC can fail to start.  I
worked around it by adding 'invoke-rc.d krb5-kdc start' in /etc/rc.local
but I'm sure a better solution is possible.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/652433

Title:
  Init script dependency error: krb5-kdc starts before slapd

Status in “krb5” package in Ubuntu:
  Confirmed

Bug description:
  Binary package hint: krb5-kdc

  If Kerberos5 configured to use LDAP directory on the same computer, it does not launches at startup due to init script dependency is not configured. The update-rc.d script creates symlinks for krb5-kdc and slapd with the following names: S18krb5-kdc, S19slapd. This makes Kerberos key distribution center launch before LDAP directory which contains data for this service and I get the following in the /var/log/daemon.log:
  krb5kdc[1018]: Can't contact LDAP server - while initializing database for realm MYREALM

  I think its no problem to make KDC to start after LDAP server and it
  will definitely solve this issue.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/652433/+subscriptions