Did you provide the join-in principal (admin@YOUR_REALM)? If you didn't try providing it and the password at the command line. <div class="gmail_quote">On Mon, Jun 27, 2011 at 1:20 PM, JoachimBadzong <<a href="mailto:badzong@wizard.franken.de">badzong@wizard.franken.de</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Hi, ok, your advice to take a look into the /var/log/httpd/error_log was good as far as i found here more information. On the other side i have to admit that these errors doesn't tell me really anything about what i could do. So i post the messages here and hope that somebody has further ideas :-) So from error_log when i try to make ipa-client-install: [Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: non-public: AttributeError: 'thread._local' object has no attribute 'principal' [Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last): [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 218, in wsgi_execute [Mon Jun 27 19:13:57 2011] [error] result = self.Command[name](*args, **options) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 421, in __call__ [Mon Jun 27 19:13:57 2011] [error] ret = self.run(*args, **options) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 727, in run [Mon Jun 27 19:13:57 2011] [error] return self.execute(*args, **options) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/plugins/join.py", line 105, in execute [Mon Jun 27 19:13:57 2011] [error] allowed = ldap.can_write(dn, 'krblastpwdchange') [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f [Mon Jun 27 19:13:57 2011] [error] return f(*new_args, **kwargs) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 705, in can_write [Mon Jun 27 19:13:57 2011] [error] (dn, attrs) = self.get_effective_rights(dn, [attr]) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f [Mon Jun 27 19:13:57 2011] [error] return f(*new_args, **kwargs) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 691, in get_effective_rights [Mon Jun 27 19:13:57 2011] [error] principal = getattr(context, 'principal') [Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local' object has no attribute 'principal' [Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: xmlserver.__call__(): [Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last): [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 246, in __call__ [Mon Jun 27 19:13:57 2011] [error] response = self.wsgi_execute(environ) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 230, in wsgi_execute [Mon Jun 27 19:13:57 2011] [error] <a href="http://self.info" target="_blank">self.info</a>('%s: %s(%s): %s', context.principal, name, ', '.join(self.Command[name]._repr_iter(**params)), e.__class__.__name__) [Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local' object has no attribute 'principal' Thanks Am Montag, den 27.06.2011, 12:41 -0400 schrieb Uzor Ide: <div><div></div><div class="h5">> If it is new install you can run the install command with a --debug > switch to see what it would report. You can also take look > at /var/log/httpd/error_log and access_log on the server. > > I had simillar issue but the server was an upgrade. > I found out though, that the error is very generic. > > The fix in my case, was a re-install of some packages on the server. > > __Ide > > On Mon, Jun 27, 2011 at 12:01 PM, JoachimBadzong > <<a href="mailto:badzong@wizard.franken.de">badzong@wizard.franken.de</a>> wrote: > Hi, > > have just checked that folder on server side: > -rw-r--r-- 1 root root 1209 6. Mai 16:50 browserconfig.html > -rw-r--r-- 1 root root 15076 6. Mai 16:50 ipa_error.css > -rw-r--r-- 1 root root 2954 6. Mai 16:50 ssbrowser.html > -rw-r--r-- 1 root root 1502 6. Mai 16:50 unauthorized.html > > Is there anything missing ? > Its an new install on naked new installed fc15 box. > > Thanks > > Am Montag, den 27.06.2011, 09:08 -0400 schrieb Uzor Ide: > > > Your server is missing some files. > > Check and make sure that you have some files in > the /etc/ipa/html > > directory > > > > This usually occurs when you do an in-place upgrade of the > fedora box > > containing freeipa-server > > > > > > __Ide > > > > On Sun, Jun 26, 2011 at 1:00 PM, JoachimBadzong > > <<a href="mailto:badzong@wizard.franken.de">badzong@wizard.franken.de</a>> wrote: > > Hi, > > > > i have setup an freeipa server ( 2.0.1-2 ) with FC15 > and have > > now tried > > to install the ipa client on client machine. > > When i start the ipa-client-install ( 2.0.1-2 ) it > detects > > everyting as > > it should be. I can enter admin prinicipal and the > passowrd, > > but then i > > get the following error message : > > > > Joining realm failed because of failing XML-RPC > request. > > This error may be caused by incompatible > server/client major > > versions. > > > > As both rpms ( server and client ) have the same > version i > > just dont > > understand the message. > > > > Whats wrong ? > > Where can i look to find more information to solve > that ? > > > > Thanks for any hint. > > J > > > > > > _______________________________________________ > > Freeipa-users mailing list > > <a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> > > > <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> > > > > > > </div></div></blockquote></div>