Guus, Firstly, thank you for your reply. On 3/21/07, Guus Leeuw jr. <guus.leeuw@xxxxxxxxxxxxxxx> wrote:
Well, look at the krb5kdc.log on your Kerberos server. That should tell you at least what's going on in terms of requests. Without that there is no real debugging from afar. And as well: Is your saslauthd configured as a unix socket on the mail server and does it do TPC/IP traffic to Kerberos? How is that traffic coming along into the Kerberos server? Same package or modified source and destination headers? What happens to the IP package if mail1 sends a package to kdc.domain.com from behind the load balancer? Will the load balancer interfere or not? Loads of things to check... But primarily, check out the logs of the Kerberos server.
I actually was pointed to the right direction by the kerberos FAQ, especially the section on multi-homed machines: http://www.cmf.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html#kerbdns I have part of the author's recommended way implemented here which appears to be working with very limited testing from my end. Appreciate your comments. Regards, Mustafa.
