Home / server / Questions / 672281
In Process
Xdg
Asked: 2015-03-02 08:53:03 +0800 CST

Slave Kerberos behind NAT - kprop fails: Incorrect net address while decoding database size from client

  • 772

I want to synchronize MIT Kerberos database from master to slave, which is in a different geographical location. kprop synchronization fails because of a NAT. Is there any solution to have kprop working? Except VPN and manual database copy with SSH.

Thanks.

kerberos

1 Answers

  1. Only solution I see is to copy DB manually from master server:

    kdb5_util dump /etc/krb5kdc/slave_datatrans
scp /etc/krb5kdc/slave_datatrans [email protected]:/etc/krb5kdc/slave_datatrans
ssh [email protected] 'kdb5_util load /etc/krb5kdc/slave_datatrans; rm /etc/krb5kdc/slave_datatrans;'
rm /etc/krb5kdc/slave_datatrans*
    • 0