Kerberos-DNS-Maddening

Is this server bound to any other directory services?

No.

For some reason I can't ssh in now so I will take a look at it tonight when I get home.

Ok. I found out why I couldn't ssh. It was off 🙂

No zero byte files

drwx------ 11 root wheel 374 Mar 19 12:37 .
drwx------ 8 root wheel 272 Mar 18 11:23 ..
-rw------- 1 root wheel 897 Mar 19 00:09 Kerberos:SERVER.DOMAIN.COM..plist
-rw------- 1 root wheel 896 Mar 19 01:03 Kerberos:SERVER.DOMAIN.COM.plist
-rw------- 1 root wheel 888 Mar 19 00:09 Kerberos:DOMAIN.COM.plist
-rw------- 1 root wheel 1649 Mar 18 23:38 KerberosKDC.plist
-rw------- 1 root wheel 1215 Mar 18 11:23 KerverosKDC.plist.BACKUP
-rw------- 1 root wheel 3935 Mar 19 12:37 ServicesInformation.plist
drwx------ 3 root wheel 102 Mar 18 13:50 SharePoints
-rw------- 1 root wheel 255 Mar 19 01:10 SharePoints.plist
-rw------- 1 root wheel 341 Mar 19 01:02 passwordserver.plist

-rw------- 1 root wheel 255 Mar 19 01:10 SharePoints.plist
-rw------- 1 root wheel 341 Mar 19 01:02 passwordserver.plist

I deleted Kerberos:SERVER.DOMAIN.COM..plist and Kerberos:DOMAIN.COM.plist
And I checked KerberosKDC.plist - default_realm is correct SERVER.DOMAIN.COM
Here is a copy of the PLIST FILE (I replaced my actual realm with SERVER.DOMAIN.COM)

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>kdcconfigdata</key>
<array>
<string>[libdefaults]
default_realm = SERVER.DOMAIN.COM

[kdcdefaults]
kdc_ports = 88
kdc tcpports = 88

[realms]
SERVER.DOMAIN.COM = {
kadmind_port = 749
max_life = 10h 0m 0s
max renewablelife = 7d 0h 0m 0s
master keytype = des3-hmac-sha1
supported_enctypes = des3-hmac-sha1:normal arcfour-hmac-md5:normal des-cbc-crc:normal des-cbc-crc:v4
acl_file = /var/db/krb5kdc/kadm5.acl
admin_keytab = /var/db/krb5kdc/kadm5.keytab
database_name = /var/db/krb5kdc/principal.SERVER.DOMAIN.COM
key stashfile = /var/db/krb5kdc/.k5.SERVER.DOMAIN.COM
}
LKDC:SHA1.6B3AFB574C7110687527279601F931BA1EDC1DDF = {
kadmind_port = 749
max_life = 10h 0m 0s
max renewablelife = 7d 0h 0m 0s
master keytype = des3-hmac-sha1
supported_enctypes = des3-hmac-sha1:normal arcfour-hmac-md5:normal des-cbc-crc:normal des-cbc-crc:v4
acl_file = /var/db/krb5kdc/kadm5.acl
admin_keytab = /var/db/krb5kdc/kadm5.keytab
database_name = /var/db/krb5kdc/principal.LKDC:SHA1.6B3AFB574C7110687527279601F931BA1EDC1DDF
key stashfile = /var/db/krb5kdc/.k5.LKDC:SHA1.6B3AFB574C7110687527279601F931BA1EDC1DDF
}
[logging]
kdc = FILE:/var/log/krb5kdc/kdc.log
admin_server = FILE:/var/log/krb5kdc/kadmin.log
</string>
</array>
<key>name</key>
<array>
<string>KerberosKDC</string>
</array>
<key>realname</key>
<array>
<string>LKDC:SHA1.6B3AFB574C7110687527279601F931BA1EDC1DDF</string>
</array>
</dict>
</plist>

As part of the solutions I have tried I deleted all these files before and had them recreated with slapconfig. Slapconfig failed EVERY time till I turned off IPv6. I don't get it. Where is the disconnect. It has to be somewhere in DNS.

What could be broken in DNS that would cause Kerberos to default to SERVER.local when IPv6 is on but SERVER.DOMAIN.COM when it is off? (AND not bother LDAP either way!!!)

Sorry for all the postings but I want to make sure anyone who reads this understands the symptoms. It's not something I have been able to find a solution for searching google. Or anyone with similar symptoms.

Ok I think I found something:
hostname = server.domain.com

but

host ip = Host ip not found: 3(NXDOMAIN)

Any ideas what this means or how to fix it?

correction:
host ip 10.0.1.33 yields

Address: 10.0.1.33#53
Aliases:

Host ip not found: 3(NXDOMAIN)

Justin Andrews wrote:
Have you used changeip to verify the DNS hostname and IP of the actual server?

Yes It was the first thing I did after setting up DNS.

Actually the issues above are remedies by typing host 10.0.1.33 I'm tired and I was actually typing "host ip 10.0.1.33"