Are you able to authenticate with kinit?
Does krb5kdc.log shows you some error?
On 11/17/2017 12:17 PM, Chris Dagdigian via FreeIPA-users wrote:
>
> Did the "yum upgrade" followed by "sudo ipa-server-upgrade"
followed by
> a reboot on two different IPA servers
>
> Now the webUI fails on both. The webUI error is:
>
> Cannot connect to the server, please check API accesibility
> (certificate, API, proxy, etc.)
>
> httpd error log says this:
>
>
> [Fri Nov 17 14:08:38.914506 2017] [:error] [pid 2748] ipa: INFO: ***
> PROCESS START ***
> [Fri Nov 17 14:08:39.002769 2017] [:error] [pid 2747] ipa: INFO: ***
> PROCESS START ***
> [Fri Nov 17 14:11:42.214284 2017] [auth_gssapi:error] [pid 2749] [client
> 172.29.128.180:54933] NO AUTH DATA Client did not send any
> authentication headers, referer:
https://usaeilidmp002.xxx.org/ipa/ui/
> [Fri Nov 17 14:11:42.304960 2017] [auth_gssapi:error] [pid 2749] [client
> 172.29.128.180:54933] GSS ERROR In Negotiate Auth:
> gss_accept_sec_context() failed: [An unsupported mechanism was requested
> (Unknown error)], referer:
https://usaeilidmp002.xxx.org/ipa/ui/
> [root@usaeilidmp002 httpd]#
>
>
> Browser is Chrome - same as I've always been using to access the admin UI
>
> Any tips or guidance? May have to restore from backup
>
>
> Chris
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org