• Errors when running 'kdb5_util update_princ_encryption'

    From Dave Steiner@21:1/5 to All on Fri Mar 11 15:23:33 2022
    I have a Test Kerberos server that I need to upgrade from v1.11 to the latest. One of the last encryption type upgrades to do was K/M so while following the instructions I ran 'kdb5_util update_princ_encryption'. During that process, I got two different
    error messages that I haven't been able to find anything about.

    Note that this server isn't really used so I don't expect this first error:

    kdb5_util: Deadlock situation detected/avoided while updating principal 'principal@REALM' key data in the database
    161160 principals processed: 8524 updated, 152635 already current

    and

    kdb5_util: Message size is incompatible with encryption type error re-encrypting key for principal 'principal@REALM'
    177352 principals processed: 7668 updated, 169683 already current

    Restarting the process worked for the first one. For the second error I deleted that principal before continuing (it's Test so that's ok).

    But the update stopped at those errors but restarting seemed to work ok.

    Is there a better way to deal with these?

    thanks,
    ds

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)