Package: upgrade-reports Severity: normal After upgrading from stretch to buster on a kerberos domain controler that I had configured a replication script.
/etc/cron.hourly/krb5-prop: /usr/sbin/kprop: No such file or directory while trying to open /var/lib/krb5kdc/replica_datatrans Propagation of database to host <replica> failed with exit code 1. The script I was using that was installed into /etc/cron.hourly looked like the following: #+BEGIN_SRC bash #!/bin/sh # Distribute KDC database to slave servers # Created by Jason Garman for use with MIT Kerberos 5 # Modified by Jaap Winius <[email protected]> slavekdcs=<replica> /usr/sbin/kdb5_util dump /var/lib/krb5kdc/slave_datatrans error=$? if [ $error -ne 0 ]; then echo "Kerberos database dump failed" echo "with exit code $error. Exciting." exit 1 fi for kdc in $slavekdcs; do /usr/sbin/kprop $kdc > /dev/null error=$? if [ $error -ne 0 ]; then echo "Propagation of database to host $kdc" echo "failed with exit code $error." fi done exit 0 #+END_SRC I patched it with this: #+BEGIN_SRC diff --- krb5-prop.orig 2020-03-14 21:05:08.429907209 -0700 +++ krb5-prop.new 2020-03-14 21:05:35.946011884 -0700 @@ -5,7 +5,7 @@ # Modified by Jaap Winius <[email protected]> -slavekdcs=<replica> +replicakdcs=<replica> -/usr/sbin/kdb5_util dump /var/lib/krb5kdc/slave_datatrans +/usr/sbin/kdb5_util dump /var/lib/krb5kdc/replica_datatrans error=$? @@ -17,5 +17,5 @@ fi -for kdc in $slavekdcs; do +for kdc in $replicakdcs; do /usr/sbin/kprop $kdc > /dev/null #+ENC_SRC It might be nice to mention that kprop's default replica file name changed between stretch and buster. Diane -- System Information: Debian Release: bullseye/sid APT prefers testing-debug APT policy: (500, 'testing-debug'), (500, 'oldstable-debug'), (500, 'testing'), (500, 'stable'), (110, 'unstable'), (100, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.4.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled
