Merge lp:~ahasenack/serverguide/kerberos-ldap-bad-config-1409392 into lp:serverguide/trunk

[Andreas Hasenack]

Specify the correct DN for the ldap_kerberos_container_dn option.

Specify the correct DN for the ldap_kerberos_container_dn option. The KDC will try to create a krbContainer at that dn, and it's a structural object class, so it can't be the toplevel dc=example,dc=com one which already is a "organization" structural object class.

I also added a missing section telling the user to actually start the kerberos services.

[Doug Smythies (dsmythies)]

Shouldn't these two lines:

+<command>sudo service krb5-kdc start</command>
+<command>sudo service krb5-admin-server start</command>

Be:

+<command>sudo systemctl start krb5-kdc</command>
+<command>sudo systemctl start krb5-admin-server</command>

For the 16.04 Serverguide release we changed all occurrences of "sudo service" to "sudo systemctl".

(and I now realize I missed the same thing in a couple of the previous MP's. I'll fix them all at once, but as a separate commit, if you agree.)

[Andreas Hasenack (ahasenack)]

It's ok to change. I personally prefer the shorter version, but systemctl is certainly fine, and even better if the rest of the documentation uses systemctl. Consistency ftw!

Thanks for catching it

[Andreas Hasenack (ahasenack)]

I pushed the changes.

[Andreas Hasenack (ahasenack)]

There is an outage going on right now, it may be a while before the diff is updated on this merge proposal page.

[lp:~ahasenack/serverguide/kerberos-ldap-bad-config-1409392]

327. By Andreas Hasenack on 2017-05-11

Use systemctl instead of service to start the kerberos services, which is what is used in other parts of the guide.

[Doug Smythies (dsmythies)]

O.K. thanks

review: Approve

=== modified file 'serverguide/C/network-auth.xml'
--- serverguide/C/network-auth.xml	2017-05-10 23:35:22 +0000
+++ serverguide/C/network-auth.xml	2017-05-11 18:39:25 +0000
@@ -3664,7 +3664,7 @@
 ...
 
 [dbdefaults]
-        ldap_kerberos_container_dn = dc=example,dc=com
+        ldap_kerberos_container_dn = cn=krbContainer,dc=example,dc=com
 
 [dbmodules]
         openldap_ldapconf = {
@@ -3743,6 +3743,18 @@
           </note>
       
         </listitem>
+
+        <listitem>
+
+          <para> 
+          Start the Kerberos KDC and admin server:
+          </para>
+
+<screen>
+<command>sudo systemctl start krb5-kdc</command>
+<command>sudo systemctl start krb5-admin-server</command>
+</screen>
+        </listitem>
       </itemizedlist>
 
       <para>