Cannot login to web UI with AD account

[iulian roman]

Hello,

When I  try to login to the WEB UI with an AD account , I get the message bellow:

"Your session has expired. Please log in again."

I have tried to check/apply the suggestions on the several links with the same error message, but so far unsuccessful. Any idea where to look into or where to check  in order to fix the issue ?

Regards, 
iulian roman

[Rob Crittenden]

iulian roman via FreeIPA-users wrote:
> Hello,
>
> When I  try to login to the WEB UI with an AD account , I get the message bellow:
>
> "Your session has expired. Please log in again."
>
> I have tried to check/apply the suggestions on the several links with the same error message, but so far unsuccessful. Any idea where to look into or where to check  in order to fix the issue ?

Please include the version of IPA you're using and those things you tried.

I assume you looked in /var/log/httpd/error_log for more information?

rob

[iulian roman]

Hello,

I am using IPA version 4.8.7. 
Bellow I've attached a snippet from /var/log/httpd/error_log :

[Wed Sep 01 11:36:32.899803 2021] [wsgi:error] [pid 3151741:tid 140666734245632] [remote 10.30.226.104:18475] ipa: INFO: 401 Unauthorized: Insufficient access:  Invalid credentials
[Wed Sep 01 11:36:32.921732 2021] [:warn] [pid 3151745:tid 140666654897920] [client 10.30.226.104:18475] failed to set perms (3140) on file (/run/ipa/ccaches/[e-mail])!, referer: https://ipaprd01.ipa.example.com/ipa/ui/
[Wed Sep 01 11:36:32.927374 2021] [wsgi:error] [pid 3151740:tid 140666734245632] [remote 10.30.226.104:18475] ipa: INFO: 401 Unauthorized: Major (851968): Unspecified GSS failure.  Minor code may provide more information, Minor (108962060): Credential cache is empty

kinit from the console , for the same user, works properly and I can get a ticket.