无法在Ubuntu 14.04上设置Kerberos – krb5kdc：没有这样的文件或目录 – 初始化数据库的领域myrealm

我试图按照Ubuntu wiki上的指南来安装和设置Kerberos。 我正在运行Ubuntu 14.04（LTS）64位。 我已经设置了avahi-daemon以提供.local DNS名称。 我然后运行：

sudo apt-get install krb5-kdc krb5-admin-server 

对话框要求我input一个领域，以及服务器的主机名。 然而，它似乎打了一个错误：

 krb5kdc: cannot initialize realm myrealm - see log file for details ...fail! 

唯一的问题 – 没有日志文件。 看起来默认的/etc/krb5.conf实际上没有启用日志logging。 无论如何，我添加以下内容：

 [logging] default = FILE:/var/log/krb5.log 

然后尝试运行：

• 无法挂载'/ dev / sda'
• 从Vista升级到Windows 7
• php56w – 常见的与旧版本的php（Centos）冲突
• 如何检查我是否成功安装了java？
• 在Ubuntu上，启动时运行mount命令的最佳位置在哪里？

 sudo dpkg-reconfigure krb5-kdc 

它仍然错误，但这次，在/var/log/krb5.log ，我看到：

 krb5kdc: No such file or directory - while initializing database for realm myrealm 

但是，它实际上并不告诉我什么文件或目录丢失。

这是我的krb5.conf

 [libdefaults] default_realm = myrealm # The following krb5.conf variables are only for MIT Kerberos. krb4_config = /etc/krb.conf krb4_realms = /etc/krb.realms kdc_timesync = 1 ccache_type = 4 forwardable = true proxiable = true # The following encryption type specification will be used by MIT Kerberos # if uncommented. In general, the defaults in the MIT Kerberos code are # correct and overriding these specifications only serves to disable new # encryption types as they are added, creating interoperability problems. # # Thie only time when you might need to uncomment these lines and change # the enctypes is if you have local software that will break on ticket # caches containing ticket encryption types it doesn't know about (such as # old versions of Sun Java). # default_tgs_enctypes = des3-hmac-sha1 # default_tkt_enctypes = des3-hmac-sha1 # permitted_enctypes = des3-hmac-sha1 # The following libdefaults parameters are only for Heimdal Kerberos. v4_instance_resolve = false v4_name_convert = { host = { rcmd = host ftp = ftp } plain = { something = something-else } } fcc-mit-ticketflags = true [logging] default = FILE:/var/log/krb5.log [realms] myrealm = { kdc = kerberos-myname-syd.local admin_server = kerberos-myname-syd.local } ATHENA.MIT.EDU = { kdc = kerberos.mit.edu:88 kdc = kerberos-1.mit.edu:88 kdc = kerberos-2.mit.edu:88 admin_server = kerberos.mit.edu default_domain = mit.edu <cut> [domain_realm] .mit.edu = ATHENA.MIT.EDU mit.edu = ATHENA.MIT.EDU .media.mit.edu = MEDIA-LAB.MIT.EDU media.mit.edu = MEDIA-LAB.MIT.EDU .csail.mit.edu = CSAIL.MIT.EDU csail.mit.edu = CSAIL.MIT.EDU .whoi.edu = ATHENA.MIT.EDU whoi.edu = ATHENA.MIT.EDU .stanford.edu = stanford.edu .slac.stanford.edu = SLAC.STANFORD.EDU .toronto.edu = UTORONTO.CA .utoronto.ca = UTORONTO.CA [login] krb4_convert = true krb4_get_tickets = false ~ ~ 

这是我的/etc/krb5/kdc.conf文件：

 [kdcdefaults] kdc_ports = 750,88 [realms] myrealm = { database_name = /var/lib/krb5kdc/principal admin_keytab = FILE:/etc/krb5kdc/kadm5.keytab acl_file = /etc/krb5kdc/kadm5.acl key_stash_file = /etc/krb5kdc/stash kdc_ports = 750,88 max_life = 10h 0m 0s max_renewable_life = 7d 0h 0m 0s master_key_type = des3-hmac-sha1 supported_enctypes = aes256-cts:normal arcfour-hmac:normal des3-hmac-sha1:normal des-cbc-crc:normal des:normal des:v4 des:norealm des:onlyrealm des:afs3 default_principal_flags = +preauth } 

对发生什么事情有任何想法？

 kdb5_util create -s -r myrealm