[Freeipa-devel] [PATCH] 756 handle no forwarded TGT

Martin Kosek mkosek at redhat.com
Wed May 18 07:37:17 UTC 2011


On Tue, 2011-05-17 at 15:12 -0400, Rob Crittenden wrote:
> Rob Crittenden wrote:
> > Martin Kosek wrote:
> >> On Mon, 2011-03-28 at 11:12 -0400, Rob Crittenden wrote:
> >>> We should gracefully handle the case where no TGT has been forwarded.
> >>> Right now we return a 500 error.
> >>>
> >>> ticket 1101
> >>>
> >>> rob
> >>
> >> This works fine on the server, nice error response from RPC server is
> >> returned. However, I was wondering if we could print this error response
> >> also to the CLI user?
> >>
> >> Right now, all I get are general error messages that would not lead me
> >> to actual root cause of this problem:
> >>
> >> $ ipa user-show admin
> >> ipa: ERROR: cannot connect to 'any of the configured servers':
> >> https://vm-027.idm.lab.bos.redhat.com/ipa/xml,
> >> https://vm-027.idm.lab.bos.redhat.com/ipa/xml
> >>
> >> Martin
> >>
> >
> > The problem seems to be that the exception is Fault, not KerberosError.
> > I'll take another look.
> >
> > rob
> 
> Updated patch attached.
> 
> You can test with:
> 
> % kinit -F admin
> % ipa user-show admin
> % kdestroy
> % ipa user-show admin
> 
> You should get reasonable errors back.
> 
> rob

Yeah, now its much more clear what happened.

ACK and pushed to master, ipa-2-0.

Martin




More information about the Freeipa-devel mailing list