freeipa install does not correctly setup krb5-admin-server

[gianluca]

In Ubuntu 18.04, ipa-server-install does not correctly configures krb5-admin-server. Therefore, the kadmin server does not start. The problem is that the krb5-admin-server service needs the file /etc/krb5kdc/kadm5.acl. This file may be empty, but it should exists, otherwise the server does not start. However, the krb5-admin-server does not contain such a file, nor the ipa-server-install command creates it during its execution.

Note this was different in Ubuntu 16.04, where krb5-admin-server used to start even without the ACL file.

[gianluca (amato)]

Changed affected package.

[Timo Aaltonen (tjaalton)]

indeed, I'll comment that part of the admin conf template out.. it should start after that?

[gianluca (amato)]

I tried commenting the line

acl_file = /etc/krb5kdc/kadm5.acl

in /etc/krb5kdc/kdc.conf, but krb5-admin-server still requires the ACL file.

[Timo Aaltonen (tjaalton)]

ok, turns out this was filed against the debian package two years ago, by me:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819017

we'll see what the outcome is

[Timo Aaltonen (tjaalton)]

fixed in git

[gianluca (amato)]

I confirm that it works!

[Fabien COMBERNOUS (fc.)]

Is the conflict between the two packages still going on?

[Fabien COMBERNOUS (fc.)]

I am asking about bionic packages

[Timo Aaltonen (tjaalton)]

while we don't have a server available, this packaging bug was fixed in the past