<div dir="ltr">Hi, <div><br></div><div>thanks for the reply, with <span style="font-family:arial,sans-serif;font-size:13px">Cherrypy 3.2.2 it works. Unfortunately now when I try to login with 'admin' account ('admin' user created previously during the installation of ipa-server) I can't see the </span><span style="color:rgb(0,0,0);font-family:Verdana,Arial,'Bitstream Vera Sans',Helvetica,sans-serif;font-size:13px">Administration tab. Basically this condition (in /usr/share/ipsilon/templates/index.html) is not satisfied:<br>
<br><div>{% if user.is_admin %}</div><div> <a href="{{ basepath }}/admin" id="admin">Administration</a> |</div><div>{% endif %}</div><div><br></div><div>For ipsilon-server installation I run: <br>
<br>ipsilon-server-install --secure=no --ipa=yes --krb=yes<br><br>because I read that 'admin' is default.<br>When I login with 'admin' in IPA Identity Management it is all ok (I login as administrator), with IPSILON I can login but not as administrator.</div>
<div><br></div><div>I used the last version of jinja2 (jinja2 2.7.2).</div><div><br></div><div>Log of ipsilon-server-install:<br><br><div><div>[2014-08-07 17:48:11,242] Intallation arguments:</div><div>[2014-08-07 17:48:11,242] admin_user: admin</div>
<div>[2014-08-07 17:48:11,242] config_profile: None</div><div>[2014-08-07 17:48:11,242] hostname: <a href="http://ltartari3.cern.ch">ltartari3.cern.ch</a></div><div>[2014-08-07 17:48:11,242] instance: idp</div><div>[2014-08-07 17:48:11,242] ipa: yes</div>
<div>[2014-08-07 17:48:11,243] krb: yes</div><div>[2014-08-07 17:48:11,243] krb_httpd_keytab: /etc/httpd/conf/http.keytab</div><div>[2014-08-07 17:48:11,243] krb_realms: None</div><div>[2014-08-07 17:48:11,243] lm_order: ['krb']</div>
<div>[2014-08-07 17:48:11,243] pam: no</div><div>[2014-08-07 17:48:11,243] pam_service: remote</div><div>[2014-08-07 17:48:11,243] saml2: yes</div><div>[2014-08-07 17:48:11,243] secure: no</div><div>[2014-08-07 17:48:11,243] server_debugging: False</div>
<div>[2014-08-07 17:48:11,244] system_user: ipsilon</div><div>[2014-08-07 17:48:11,244] testauth: no</div><div>[2014-08-07 17:48:11,244] uninstall: False</div><div>[2014-08-07 17:48:11,244] Installation initiated</div><div>
[2014-08-07 17:48:11,244] Installing default config files</div><div>[2014-08-07 17:48:11,461] Configuring environment helpers</div><div>Searching for keytab in: /etc/httpd/conf/http.keytab ... Found!</div><div>Searching for keytab in: /etc/httpd/conf/ipa.keytab ... Found!</div>
<div>[2014-08-07 17:48:11,486] Configuring login managers</div><div>Cannot set persistent booleans without managed policy.</div><div>[2014-08-07 17:48:12,126] Configuring Authentication Providers</div><div>Generating a 2048 bit RSA private key</div>
<div>.............+++</div><div>..............+++</div><div>writing new private key to '/var/lib/ipsilon/idp/saml2/idp.key'</div><div>-----</div><div>Installation complete.</div><div>Please restart HTTPD to enable the IdP instance.</div>
</div></div><div><br></div><div><br></div><div>Thanks in advance.</div><div><br></div><div>Luca Tartarini</div></span></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-08-06 17:37 GMT+02:00 Simo Sorce <span dir="ltr"><<a href="mailto:ssorce@redhat.com" target="_blank">ssorce@redhat.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Wed, 2014-08-06 at 17:20 +0200, Luca Tartarini wrote:<br>
> Hi,<br>
><br>
> Thanks for the replies. I updated the line with:<br>
><br>
> plugins_by_name = dict((<a href="http://p.name" target="_blank">p.name</a>, p) for p in self._site[FACILITY]['enabled'])<br>
><br>
> and it works (the installation is completed succesfully).<br>
><br>
> But now when I try to connect to:<br>
><br>
> <a href="https://myidp.example.com/idp" target="_blank">https://myidp.example.com/idp</a><br>
><br>
> or I try to configure ipsilon-client (ipsilon-client-install ...) I got<br>
> HTTP 500 Internal Error (with ipsilon background). I put "debug = True"<br>
> in /etc/ipsilon/idp/ipsilon.conf and I got this (in<br>
> /var/log/httpd/error_log):<br>
><br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] Available<br>
> providers: ['saml2']<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp<br>
> storage path: /var/lib/ipsilon/idp/saml2<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp<br>
> metadata file: metadata.xml<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp<br>
> storage path: /var/lib/ipsilon/idp/saml2<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp key<br>
> file: /var/lib/ipsilon/idp/saml2/idp.key<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp<br>
> storage path: /var/lib/ipsilon/idp/saml2<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp<br>
> certificate file: /var/lib/ipsilon/idp/saml2/idp.pem<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] IdP Provider<br>
> registered: saml2<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] enabled:<br>
> 1<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] IdP Provider<br>
> enabled: saml2<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] Admin login<br>
> plugin: krb<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] Admin login<br>
> plugin: pam<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [pam] username<br>
> text: Username<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [pam] password<br>
> text: Password<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [pam] service<br>
> name: remote<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [pam] help text:<br>
> Insert your Username and Password and then submit.<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] Admin login<br>
> plugin: testauth<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [testauth]<br>
> username text: Username<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [testauth]<br>
> password text: Password<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [testauth] help<br>
> text: Insert your Username and Password and then submit.<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] Admin provider<br>
> plugin: saml2<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] default<br>
> allowed nameids: ['persistent', 'transient', 'email', 'kerberos', 'x509']<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp<br>
> metadata file: metadata.xml<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] default<br>
> email domain: <a href="http://example.com" target="_blank">example.com</a><br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp<br>
> certificate file: /var/lib/ipsilon/idp/saml2/idp.pem<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] allow<br>
> self registration: True<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp key<br>
> file: /var/lib/ipsilon/idp/saml2/idp.key<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] idp<br>
> storage path: /var/lib/ipsilon/idp/saml2<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] [saml2] default<br>
> nameid: persistent<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] Traceback (most<br>
> recent call last):<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/_cprequest.py",<br>
> line 104, in run<br>
> [Wed Aug 06 16:22:09 2014] [error] hook()<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/_cprequest.py",<br>
> line 63, in __call__<br>
> [Wed Aug 06 16:22:09 2014] [error] return self.callback(**self.kwargs)<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/ipsilon/util/page.py", line 37, in protect<br>
> [Wed Aug 06 16:22:09 2014] [error] UserSession().remote_login()<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/ipsilon/util/user.py", line 103, in<br>
> __init__<br>
> [Wed Aug 06 16:22:09 2014] [error] self.user = self.get_data('user',<br>
> 'name')<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/ipsilon/util/user.py", line 147, in<br>
> get_data<br>
> [Wed Aug 06 16:22:09 2014] [error] if facility not in cherrypy.session:<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/__init__.py",<br>
> line 258, in __contains__<br>
> [Wed Aug 06 16:22:09 2014] [error] return key in child<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/lib/sessions.py",<br>
> line 335, in __contains__<br>
> [Wed Aug 06 16:22:09 2014] [error] self.load()<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/lib/sessions.py",<br>
> line 268, in load<br>
> [Wed Aug 06 16:22:09 2014] [error] data = self._load()<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/lib/sessions.py",<br>
> line 497, in _load<br>
> [Wed Aug 06 16:22:09 2014] [error] assert self.locked, ("The session<br>
> load without being locked. "<br>
> [Wed Aug 06 16:22:09 2014] [error] AssertionError: The session load without<br>
> being locked. Check your tools' priority levels.<br>
> [Wed Aug 06 16:22:09 2014] [error]<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] HTTP<br>
> [Wed Aug 06 16:22:09 2014] [error] Request Headers:<br>
> [Wed Aug 06 16:22:09 2014] [error] COOKIE:<br>
> __utma=203412483.1716219377.1393273532.1393273532.1398882487.2;<br>
> __utmz=203412483.1398882487.2.2.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided);<br>
> _ga=GA1.2.1716219377.1393273532;<br>
> session_id=0942ebacef3fbcf8f9b21605013b5dfa1454bc93<br>
> [Wed Aug 06 16:22:09 2014] [error] ACCEPT-LANGUAGE:<br>
> it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4,fr;q=0.2<br>
> [Wed Aug 06 16:22:09 2014] [error] USER-AGENT: Mozilla/5.0 (X11; Linux<br>
> x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.132<br>
> Safari/537.36<br>
> [Wed Aug 06 16:22:09 2014] [error] CONNECTION: keep-alive<br>
> [Wed Aug 06 16:22:09 2014] [error] Remote-Addr: 128.141.28.32<br>
> [Wed Aug 06 16:22:09 2014] [error] HOST: <a href="http://ltartari3.cern.ch" target="_blank">ltartari3.cern.ch</a><br>
> [Wed Aug 06 16:22:09 2014] [error] CACHE-CONTROL: max-age=0<br>
> [Wed Aug 06 16:22:09 2014] [error] ACCEPT:<br>
> text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8<br>
> [Wed Aug 06 16:22:09 2014] [error] ACCEPT-ENCODING: gzip,deflate,sdch<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] HTTP Traceback<br>
> (most recent call last):<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/_cprequest.py",<br>
> line 667, in respond<br>
> [Wed Aug 06 16:22:09 2014] [error] self.hooks.run('before_handler')<br>
> [Wed Aug 06 16:22:09 2014] [error] File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/_cprequest.py",<br>
> line 114, in run<br>
> [Wed Aug 06 16:22:09 2014] [error] raise exc<br>
> [Wed Aug 06 16:22:09 2014] [error] AssertionError: The session load without<br>
> being locked. Check your tools' priority levels.<br>
> [Wed Aug 06 16:22:09 2014] [error]<br>
> [Wed Aug 06 16:22:09 2014] [error] [06/Aug/2014:16:22:09] ['500 Internal<br>
> Server Error', 'The server encountered an unexpected condition which<br>
> prevented it from fulfilling the request.', 'Traceback (most recent call<br>
> last):\\n File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/_cprequest.py",<br>
> line 667, in respond\\n self.hooks.run(\\'before_handler\\')\\n File<br>
> "/usr/lib/python2.6/site-packages/CherryPy-3.5.0-py2.6.egg/cherrypy/_cprequest.py",<br>
> line 114, in run\\n raise exc\\nAssertionError: The session load without<br>
> being locked. Check your tools\\' priority levels.\\n', '3.5.0']<br>
><br>
> and obviously "GET /idp/ HTTP/1.1" 500 1054 in /var/log/httpd/access_log<br>
><br>
> Cherrypy bug?<br>
><br>
> Thanks.<br>
<br>
</div></div>I've never seen this but I am using Cherrypy 3.2.2 on F20.<br>
<span class="HOEnZb"><font color="#888888"><br>
Simo.<br>
<br>
<br>
</font></span></blockquote></div><br></div>