kdb5_ldap_util can not create krbContainer
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
krb5 (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Following instructions on
https:/
creating the initial database with kdb5_ldap_util
(>>sudo kdb5_ldap_util -D cn=admin,
fails with error message:
>>kdb5_ldap_util: Kerberos Container create FAILED: Object class violation while creating realm 'APP.TSN'
after reading these mails
http://
setting up loglevel for slapd in syslog, following error message can be found:
----------
Sep 1 09:52:19 ldap01 slapd[1165]: ==> hdb_add: dc=app,dc=tsn
Sep 1 09:52:19 ldap01 slapd[1165]: oc_check_required entry (dc=app,dc=tsn), objectClass "krbContainer"
Sep 1 09:52:19 ldap01 slapd[1165]: oc_check_allowed type "objectClass"
Sep 1 09:52:19 ldap01 slapd[1165]: oc_check_allowed type "cn"
Sep 1 09:52:19 ldap01 slapd[1165]: oc_check_allowed type "structuralObje
Sep 1 09:52:19 ldap01 slapd[1165]: oc_check_allowed type "dc"
Sep 1 09:52:19 ldap01 slapd[1165]: Entry (dc=app,dc=tsn), attribute 'dc' not allowed
Sep 1 09:52:19 ldap01 slapd[1165]: hdb_add: entry failed schema check: attribute 'dc' not allowed (65)
-----------
System:
Ubuntu 14.04 LTS
slapd 2.4.31-1+nmu amd64
krb5-config 2.3
krb5-kdc 1.12+dfsg-2u amd64
krb5-kdc-ldap 1.12+dfsg-2u amd64
krb5-locales 1.12+dfsg-2u
krb5-user 1.12+dfsg-2u amd64
Status changed to 'Confirmed' because the bug affects multiple users.