I'm in the process of migrating my production IPA servers from RH6 to CentOS6. I have successfully completed this in our QA environments with very few issues, but it seems that our production environment wants to be difficult.

After conversion to CentOS 6, dirsrv is functioning and replicating. A quick status check shows everything started up except memcached and named. Logs show this ..

en2210s named 5366 - -  sizing zone task pool based on 6 zones
en2210s named 5366 - -  /etc/named.conf:12: no forwarders seen; disabling forwarding
en2210s named 5366 - -  set up managed keys zone for view _default, file 'dynamic/managed-keys.bind'
en2210s named 5366 - -  GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server krbtgt/SOCKET@SFMC.CO not found in Kerberos database)
en2210s named 5366 - -  bind to LDAP server failed: Local error
en2210s named 5366 - -  dynamic database 'ipa' configuration failed: failure
en2210s named 5366 - -  loading configuration: failure
en2210s named 5366 - -  exiting (due to fatal error)

Had a quick check of the dns keytab, and the contents of /etc/named.keytab match what is currently in kerberos. The options in named.conf still matches what is on the other replicas. I've been hunting around for some answers in Google, but so far I'm not finding a lot of clues.

Can someone lead my down a path here? 

Terry
--
Terry Soucy
Systems Engineering Lead | Salesforce
Mobile: +1.506.609.3247