Propagation

Setting Up Propagation

Step 4. Kill all the running daemons on the secondary server and extract the service key

1.Kill the daemons on the secondary server, using the following command:

#/sbin/init.d/krbsrv stop

2.Extract the service key, using the following command:

#/opt/krb5/bin/kadmin <admin/principal> -R ext <service principal name>

NOTE

The <admin/principal> is the same as the one added in Step 2, on the

 

primary server.

 

 

Step 5. Start the admin daemon on the secondary server

1.Start the kadmind, using the following command:

# /opt/krb5/sbin/kadmind

Step 6. Start the propagation daemon on the primary server and verify whether the daemons have started

1.Start the propagation daemon, using the following command:

# /opt/krb5/sbin/kadmind

2.Verify that propagation has occurred on the primary server by checking its log file (/var/adm/messages) for this message sequence:

Propagation System Started.

[fqdn] subscriber_ip_addrs: <nnn.nnn.nnn.nnn>

[fqdn] Established secure connection for propagation

[fqdn] no cache file or OK file found; will do full dump

[fqdn] starting full dump

[fqdn] full_dump successful.

where:

 

fqdn

is the fully qualified domain name (FQDN) of the

 

secondary server

Chapter 7

227