<div>Hi,</div><br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="im"><br></div>
How about:<br>
<br>
api.bootstrap(context='webservices', debug=True, xmlrpc_uri='<a href="https://luna.greyoak.com/ipa/xml" target="_blank">https://luna.greyoak.com/ipa/xml</a>')<br></blockquote><div><br></div><div> when I do this, I get these messages</div>
<div><br></div><div>---------------------------------------------------------------------</div><div><div><div>In [1]: from ipalib import api</div><div><br></div><div>In [2]: api.bootstrap(context='webservices', debug=True, xmlrpc_uri='<a href="https://server.domain.org/ipa/xml">https://server.domain.org/ipa/xml</a>')</div>
<div><br></div><div>In [3]: api.env.xmlrpc_uri </div><div>Out[3]: u'<a href="https://server.domain.org/ipa/xml">https://server.domain.org/ipa/xml</a>'</div><div><br></div><div>In [4]: api.env.realm </div><div>Out[4]: u'<a href="http://EXAMPLE.COM">EXAMPLE.COM</a>'</div>
<div><br></div><div>In [5]: api.finalize()</div><div>ipa: DEBUG: importing all plugin modules in '/usr/lib/python2.6/site-packages/ipalib/plugins'...</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/automount.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py'</div><div>ipa: INFO: skipping plugin module ipalib.plugins.cert: env.enable_ra is not True</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/config.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/dns.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/group.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbac.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/host.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hostgroup.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/kerberos.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/krbtpolicy.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/migration.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/misc.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/netgroup.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/passwd.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/rolegroup.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/service.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/taskgroup.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/user.py'</div>
<div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py'</div><div>ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py'</div>
<div><br></div><div>In [6]: api.Backend.xmlclient.connect()</div><div>ipa: INFO: Created connection context.xmlclient</div><div><br></div><div>In [7]: api.Command.user_show(u'admin')</div><div>ipa: DEBUG: raw: user_show(u'admin')</div>
<div>ipa: INFO: user_show(u'admin', all=False, raw=False)</div><div>ipa: INFO: Forwarding 'user_show' to server u'<a href="https://server.domain.org/ipa/xml">https://server.domain.org/ipa/xml</a>'</div>
<div>ipa: DEBUG: Caught fault 3008 from server <a href="https://server.domain.org/ipa/xml">https://server.domain.org/ipa/xml</a>: invalid 'uid': Only one value is allowed</div><div>---------------------------------------------------------------------------</div>
<div>ConversionError Traceback (most recent call last)</div><div><br></div><div>/root/<ipython console> in <module>()</div><div><br></div><div>/usr/lib/python2.6/site-packages/ipalib/frontend.pyc in __call__(self, *args, **options)</div>
<div> 399 self.validate(**params)</div><div> 400 (args, options) = self.params_2_args_options(**params)</div><div>--> 401 ret = self.run(*args, **options)</div><div> 402 if (</div>
<div> 403 isinstance(ret, dict)</div><div><br></div><div>/usr/lib/python2.6/site-packages/ipalib/frontend.pyc in run(self, *args, **options)</div><div> 668 if self.api.env.in_server:</div><div> 669 return self.execute(*args, **options)</div>
<div>--> 670 return self.forward(*args, **options)</div><div> 671 </div><div> 672 def execute(self, *args, **kw):</div><div><br></div><div>/usr/lib/python2.6/site-packages/ipalib/frontend.pyc in forward(self, *args, **kw)</div>
<div> 689 Forward call over XML-RPC to this same command on server.</div><div> 690 """</div><div>--> 691 return self.Backend.xmlclient.forward(<a href="http://self.name">self.name</a>, *args, **kw)</div>
<div> 692 </div><div> 693 def finalize(self):</div><div><br></div><div>/usr/lib/python2.6/site-packages/ipalib/rpc.pyc in forward(self, name, *args, **kw)</div><div> 412 if e.faultCode in self.__errors:</div>
<div> 413 error = self.__errors[e.faultCode]</div><div>--> 414 raise error(message=e.faultString)</div><div> 415 raise UnknownError(</div><div> 416 code=e.faultCode,</div>
<div><br></div><div>ConversionError: invalid 'uid': Only one value is allowed</div><div>---------------------------------------------------------------------</div></div></div><div><br></div><div>For api.env.realm, u'<a href="http://DOMAIN.ORG">DOMAIN.ORG</a>' is expected value. it seems that api.env was not initialized correctly.</div>
<div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Is there anything interesting logged on the server?<br>
<br>
With debug=True you get a lot more output, might show something as well.<br></blockquote><div><br></div><div>You are right, here the logs on the ipa server</div><div><br></div><div><div>---------------------------------------------------------------------</div>
</div><div><div><div>==> /var/log/httpd/error_log <==</div><div>ipa: INFO: Created connection context.ldap2</div><div>ipa: DEBUG: raw: user_show((u'admin',), all=False, raw=False)</div><div>ipa: INFO: Destroyed connection context.ldap2</div>
<div><br></div><div>==> /var/log/httpd/access_log <==</div><div>172.30.0.137 - <a href="mailto:raca@DOMAIN.ORG">raca@DOMAIN.ORG</a> [23/Apr/2010:18:06:16 +0200] "POST /ipa/xml HTTP/1.0" 200 315</div><div>
<br>
</div><div>==> /var/log/httpd/error_log <==</div><div>ipa: INFO: Created connection context.ldap2</div><div>ipa: DEBUG: raw: user_show((u'admin',), all=False, raw=False)</div><div>ipa: INFO: Destroyed connection context.ldap2</div>
<div><br></div><div>==> /var/log/httpd/access_log <==</div><div>172.30.0.137 - <a href="mailto:raca@DOMAIN.ORG">raca@DOMAIN.ORG</a> [23/Apr/2010:18:11:53 +0200] "POST /ipa/xml HTTP/1.0" 200 315</div></div>
<div><br></div><div>---------------------------------------------------------------------</div><div><br>I think, I have this problem because I use two different versions of freeipa. In the one hand, I have an old version (1.9.0GIT28d8bd6-0.fc12.i686 that I generated there was a time) of freeipa on the ipa server, on the other hand I have the last version of freeIPA on the client. So, I generated new rpms from the last version of git repository and I installed them on the client and server.</div>
</div><div><br></div><div>But when I start ipa-server-install on the server, I get an error (hem I think that I must to post a new mail on the mailing list)</div><div><br></div><div>----------------------------------------------------------------------</div>
<div>....</div><div>....</div><div><div>The following operations may take some minutes to complete.</div><div>Please wait until the prompt is returned.</div><div><br></div><div>Configuring directory server for the CA:</div>
<div> [1/4]: creating directory server user</div><div> [2/4]: creating directory server instance</div><div> [3/4]: configuring directory to start on boot</div><div> [4/4]: restarting directory server</div><div>done configuring pkids.</div>
<div>Configuring certificate server:</div><div> [1/14]: creating certificate server user</div><div> [2/14]: configuring certificate server instance</div><div>root : CRITICAL failed to restart ca instance Command '/usr/bin/perl /usr/bin/pkisilent ConfigureCA -cs_hostname <a href="http://server.domain.org">server.domain.org</a> -cs_port 9445 -client_certdb_dir /tmp/tmp-Li3Uhg -client_certdb_pwd XXXXXXXX -preop_pin cYUmg5JpkmRm3xBAlTqg -domain_name IPA -admin_user admin -admin_email root@localhost -admin_password XXXXXXXX -agent_name ipa-ca-agent -agent_key_size 2048 -agent_key_type rsa -agent_cert_subject "CN=ipa-ca-agent,O=IPA" -ldap_host <a href="http://server.domain.org">server.domain.org</a> -ldap_port 7389 -bind_dn "cn=Directory Manager" -bind_password XXXXXXXX -base_dn o=ipaca -db_name ipaca -key_size 2048 -key_type rsa -save_p12 true -backup_pwd XXXXXXXX -subsystem_name pki-cad -token_name internal -ca_subsystem_cert_subject_name "CN=CA Subsystem,O=IPA" -ca_ocsp_cert_subject_name "CN=OCSP Subsystem,O=IPA" -ca_server_cert_subject_name "CN=<a href="http://server.domain.org">server.domain.org</a>,O=IPA" -ca_audit_signing_cert_subject_name "CN=CA Audit,O=IPA" -ca_sign_cert_subject_name "CN=Certificate Authority,O=IPA" -external false -clone false' returned non-zero exit status 255</div>
<div> [3/14]: creating CA agent PKCS#12 file in /root</div><div>Unexpected error - see ipaserver-install.log for details:</div><div> Command '/usr/bin/pk12util -n ipa-ca-agent -o /root/ca-agent.p12 -d /tmp/tmp-Li3Uhg -k /tmp/tmphMeDU3 -w /tmp/tmphMeDU3' returned non-zero exit status 24</div>
</div><div><br></div><div><div>----------------------------------------------------------------------</div></div><div><br></div><div>In the logs of installation i found these errors :</div><div><br></div><div>----------------------------------------------------------------------</div>
<div><div>....</div><div>Attempting to connect to: <a href="http://server.domain.org:9445">server.domain.org:9445</a></div><div>ERROR: unable to set Cipher List</div><div>ERROR: Exception = org.mozilla.jss.ssl.SSLSocketException: Failed to enable cipher 0xc001</div>
<div>: (-12266) An unknown SSL cipher suite has been requested.</div><div>in TestCertApprovalCallback.approve()</div></div><div>....</div><div>....</div><div><div>ERROR: unable to parse xml</div><div>ERROR XML = </div><div>
ERROR: ConfigureCA: LoginPanel() failure</div><div>ERROR: unable to create CA</div><div><br></div><div>#######################################################################</div><div><br></div><div>2010-04-23 18:57:01,648 INFO stderr=[Fatal Error] :1:947: The element type "HR" must be terminated by the matching end-tag "</HR>".</div>
<div>org.xml.sax.SAXParseException: The element type "HR" must be terminated by the matching end-tag "</HR>".</div><div> at org.apache.xerces.parsers.DOMParser.parse(DOMParser.java:239)</div>
<div> at org.apache.xerces.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:283)</div><div> at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:121)</div><div> at ParseXML.parse(ParseXML.java:43)</div>
<div> at ConfigureCA.LoginPanel(ConfigureCA.java:199)</div><div> at ConfigureCA.ConfigureCAInstance(ConfigureCA.java:1138)</div><div> at ConfigureCA.main(ConfigureCA.java:1595)</div></div><div>...</div>
<div><div>----------------------------------------------------------------------</div></div><div><br></div><div>I can provide you other informations if needed. Thank you for your help !</div><div><br></div><div><br></div>
</div>