[Samba] CentOS 6, BIND_DLZ and kinit errors (Cannot contact any KDC for requested realm)

[Thomas Harold]

On 5/3/2014 11:09 AM, steve wrote:
> On Sat, 2014-05-03 at 10:48 -0400, Thomas Harold wrote:
>> It seems like the BIND 9.8 that ships with CentOS 6.x (and probably RHEL
>> 6.x) is not built with --with-dlopen option.
>>
>> Platform: CentOS 6.5
>> BIND 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1
>>
>> Error seen:
>>
>> RuntimeError: kinit for HOSTNAME$EXAMPLE.COM failed (Cannot contact any
>> KDC for requested realm)
> 
> Hi
> What do you have for krb5.conf?
> 
> 

Minimal (replaced actual realm with 'example.com'):

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = EXAMPLE.COM
 dns_lookup_realm = false
 dns_lookup_kdc = true

I'm 99% sure now that the version of BIND 9.8 that is installed on this
machine does not have 'dlopen' compiled in.