Anyone have any further suggestions for troubleshooting this issue with the web UI?
On Fri, May 18, 2018 at 4:01 PM, Jonathan Vaughn jonathan@creatuity.com wrote:
httpd error_log
[Fri May 18 15:58:29.546255 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: WSGI wsgi_dispatch.__call__: [Fri May 18 15:58:29.547217 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: WSGI login_password.__call__: [Fri May 18 15:58:29.549799 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Obtaining armor in ccache /var/run/ipa/ccaches/armor_14004 [Fri May 18 15:58:29.550812 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Initializing anonymous ccache [Fri May 18 15:58:29.552268 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Starting external process [Fri May 18 15:58:29.553377 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: args=/usr/bin/kinit -n -c /var/run/ipa/ccaches/armor_14004 -X X509_anchors=FILE:/var/kerberos/krb5kdc/kdc.crt -X X509_anchors=FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem [Fri May 18 15:58:30.486537 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Process finished, return code=0 [Fri May 18 15:58:30.488137 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: stdout= [Fri May 18 15:58:30.489128 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: stderr= [Fri May 18 15:58:30.490955 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Initializing principal admin using password [Fri May 18 15:58:30.492060 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Using armor ccache /var/run/ipa/ccaches/armor_14004 for FAST webauth [Fri May 18 15:58:30.493262 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Using enterprise principal [Fri May 18 15:58:30.494728 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Starting external process [Fri May 18 15:58:30.495799 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: args=/usr/bin/kinit admin -c /var/run/ipa/ccaches/kinit_14004 -T /var/run/ipa/ccaches/armor_14004 -E [Fri May 18 15:58:30.721637 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Process finished, return code=0 [Fri May 18 15:58:30.723230 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: stdout=Password for admin@CREATUITY.INTERNAL: [Fri May 18 15:58:30.723432 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] [Fri May 18 15:58:30.724345 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: stderr= [Fri May 18 15:58:30.725716 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Cleanup the armor ccache [Fri May 18 15:58:30.727071 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Starting external process [Fri May 18 15:58:30.728152 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: args=/usr/bin/kdestroy -A -c /var/run/ipa/ccaches/armor_14004 [Fri May 18 15:58:30.798642 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Process finished, return code=0 [Fri May 18 15:58:30.800249 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: stdout= [Fri May 18 15:58:30.801224 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: stderr= [Fri May 18 15:58:30.857737 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Starting new HTTP connection (1): ipa-11.creatuity.internal [Fri May 18 15:58:30.867978 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: http://ipa-11.creatuity.internal:80 "GET /ipa/session/cookie HTTP/1.1" 301 260 [Fri May 18 15:58:30.889415 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: Starting new HTTPS connection (1): ipa-11.creatuity.internal [Fri May 18 15:58:31.105092 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: https://ipa-11.creatuity. internal:443 "GET /ipa/session/cookie HTTP/1.1" 200 0 [Fri May 18 15:58:31.157295 2018] [wsgi:error] [pid 14003:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: WSGI wsgi_dispatch.__call__: [Fri May 18 15:58:31.158347 2018] [wsgi:error] [pid 14003:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: WSGI jsonserver_session.__call__: [Fri May 18 15:58:31.159289 2018] [wsgi:error] [pid 14003:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: no ccache, need login [Fri May 18 15:58:31.160349 2018] [wsgi:error] [pid 14003:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: 401 Unauthorized need login [Fri May 18 15:58:31.175232 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: WSGI wsgi_dispatch.__call__: [Fri May 18 15:58:31.176208 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: WSGI KerberosLogin.__call__: [Fri May 18 15:58:31.177060 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: no ccache, need login [Fri May 18 15:58:31.178047 2018] [wsgi:error] [pid 14004:tid 2903716672] [remote 10.10.11.3:59284] ipa: DEBUG: 401 Unauthorized need login
On Fri, May 18, 2018 at 3:53 PM, Rob Crittenden rcritten@redhat.com wrote:
Jonathan Vaughn wrote:
System time appears to be fine.
Here's the httpd access log (nothing in error log): 10.10.255.101 - - [18/May/2018:15:26:19 -0500] "GET /ipa/session/cookie HTTP/1.1" 301 260 "-" "python-requests/2.18.4" 10.10.255.101 - admin@CREATUITY.INTERNAL [18/May/2018:15:26:20 -0500] "GET /ipa/session/cookie HTTP/1.1" 200 - 10.10.11.3 - - [18/May/2018:15:26:18 -0500] "POST /ipa/session/login_password HTTP/1.1" 200 20 10.10.11.3 - admin@CREATUITY.INTERNAL [18/May/2018:15:26:20 -0500]
"POST
/ipa/session/json HTTP/1.1" 401 - 10.10.11.3 - admin@CREATUITY.INTERNAL [18/May/2018:15:26:20 -0500] "GET /ipa/session/login_kerberos?_=1526674892374 HTTP/1.1" 401 -
You'll want to look at the error log for more details. For even more output create /etc/ipa/server.conf with the contents:
[global] debug = True
and restart httpd
rob
On Fri, May 18, 2018 at 3:23 PM, Jonathan Vaughn <
jonathan@creatuity.com
mailto:jonathan@creatuity.com> wrote:
Actually - may have spoke too soon. I thought I'd signed in to the UI but I was actually in another server's UI. When I try to log in it says that my login has expired... so progress but something else is busted. On Fri, May 18, 2018 at 3:20 PM, Jonathan Vaughn <jonathan@creatuity.com <mailto:jonathan@creatuity.com>> wrote: Looks like replica install finished just fine, and I can access the the web UI on it. No obvious problems. So it would appear that code change fixed 389DS for ARM. I'm not running the Dogtag CA on the Pi, just on the non-Pi servers, otherwise would need to probably adjust the startup timeout for it so that the install script didn't give up waiting on it. When I was first trying to play with this I tried installing the first replica/master on the Pi, and ran into the Dogtag timeout problem. Even installing Oracle Java instead of the OpenJDK version of Java didn't solve it, because somehow it always picks the OpenJDK java instead of oracle even if I change the alternatives setting to default to the Oracle one... But as far as I can tell otherwise, everything is working as expected.