Errors when running 'kdb5_util update_princ_encryption'

[Dave Steiner]

I have a Test Kerberos server that I need to upgrade from v1.11 to the latest. One of the last encryption type upgrades to do was K/M so while following the instructions I ran 'kdb5_util update_princ_encryption'. During that process, I got two different error messages that I haven't been able to find anything about.

Note that this server isn't really used so I don't expect this first error:

kdb5_util: Deadlock situation detected/avoided while updating principal 'principal@REALM' key data in the database
161160 principals processed: 8524 updated, 152635 already current

and

kdb5_util: Message size is incompatible with encryption type error re-encrypting key for principal 'principal@REALM'
177352 principals processed: 7668 updated, 169683 already current

Restarting the process worked for the first one. For the second error I deleted that principal before continuing (it's Test so that's ok).

But the update stopped at those errors but restarting seemed to work ok.

Is there a better way to deal with these?

thanks,
ds