The Famous Tiger OD "XRAID" hang

Many customers and resellers are now aware of the big bad Kerio MailServer Tiger OpenDirectory XRAID hang/crash which crashes the whole machine. Kerio keeps track of this as bug 10770.

Guess what? We have figured it out.

  1. It has nothing to do with XRAID. The customers who reported the issue happened to have XRAID which caused some suspicion. Well, a large percentage of Kerio OSX customers have XRAID so it is irrelavent.

  2. It is not a Kerio bug. Kerio MailServer is a heavy user of the PasswordServer so if there is a bug in PasswordService, KMS is likely to find it.

    There is a bug in the PasswordService on Tiger.
    Tiger broke Password Service

  3. There is a workaround. Switch your Tiger KMS to Kerberos. This avoids using the PasswordService. If you are on KMS 6.1.x or before, edit the file in /usr/local/kerio/mailserver/ldapmap/apple.map, and change the Auth_Type figure to 3 instead of 4. Restart KMS. Otherwise, just change it in the Directory Service settings in the Admin Console.

    If it fails authenticating, your Kerberos is not configured correctly. Be sure the Kerberos realm in the domain settings "Advanced" section matches the Kerberos name in /Library/Preferences/edu.mit.Kerberos file. This is the most common reason for it to not work.

  4. I have never received this information from customers having this problem. I would like to know while this problem is happening, how many files are under /var/db/authserver/. If you can provide this information, please open a ticket and inform the support staff that Ken wants this info.