Syntax error in profile relation while retreiving configuration parameters

Question

Trying to get our Directory Services properly functioning after an IP change. Running
# kadmin.local -q listprincs
yesterday revealed that all service principals weren't set up properly. Dig dig dig... found that I might (since this server was originally 10.3--now it's 10.4.4) try
# slapconfig -kerberize diradmin
That pointed me in the direction of using Workgroup Manager to fix a couple things with the KerberosClient record for the server. Did that. Reran the command. It complained about an improperly formatted configuration file because it wiped the contents of edu.mit.Kerberos (took out the DNS bits). Then ran
# kerberosautoconfig -u
which resulted in
MergeLoggingInfo: creating default logging info
At this point, edu.mit.Kerberos looked good. Then I tried
# /usr/sbin/kdcsetup -f /LDAPv3/127.0.0.1 -w -a diradmin -p ** -v 1 REALM
which resulted in
Contacting the Directory Server
Authenticating to the Directory Server
Creating Kerberos directory
Creating KDC Config File
Creating Admin ACL File
Creating Kerberos Master Key
Creating Kerberos Database
Syntax error in profile relation while retreiving configuration parameters
SendInteractiveCommand: failed to get pattern
Creating Kerberos Admin user
kadmin.local: Syntax error in profile relation while initializing kadmin.local interface
Adding kerberos auth authority to admin user
Creating keytab for the admin tools
kadmin.local: Syntax error in profile relation while initializing kadmin.local interface
Adding KDC & kadmind to launchd
Adding the new KDC into the KerberosClient config record
edu.mit.kadmind: Already loaded
com.apple.kdcmond: Already loaded
Finished
Now when I try
# kadmin.local -q listprincs
I get
Authenticating as principal root/admin@REALM with password.
kadmin.local: Syntax error in profile relation while initializing kadmin.local interface
And now I'm getting this in kdc.log
Feb 07 09:41:26 od.master.fqdn krb5kdc[21234](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) xx.xx.xx.xx: LOOKINGUPCLIENT: diradmin@REALM for krbtgt/REALM@REALM, Database is locked or in use--try again later
Feb 07 09:41:26 od.master.fqdn krb5kdc[21234](info): DISPATCH: repeated (retransmitted?) request from xx.xx.xx.xx, resending previous response
Help!
Thanks,
Rich
ps. The typo in the error message is MIT's, not mine. I guess their engineering departments are better than their English department.
Xserve G5   Mac OS X (10.4.4)  

Answer 1

Look at the two config files:
/Library/Preferences/edu.mit.Kerberos
/var/db/krb5kdc/kdc.log
the Database is locked or in use message is due to a missing lock file.
Look in /var/db/krb5kdc/ for principal.kadm5.lock
Hope this gets you started
- Leland