<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 03/06/2015 11:59 AM, Dan Mossor
wrote:<br>
</div>
<blockquote
cite="mid:CAMobkEOVEMsokJDFAEX_=MfpzKV6VkhMfNXN1s60G7UzEqmJzQ@mail.gmail.com"
type="cite">
<div dir="ltr"><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Mar 6, 2015 at 9:43 AM,
Dmitri Pal <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:dpal@redhat.com" target="_blank">dpal@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>
<div class="h5">
<div>On 03/06/2015 10:35 AM, Dan Mossor wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr"><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Mar 6, 2015
at 9:21 AM, Dmitri Pal <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:dpal@redhat.com"
target="_blank">dpal@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="margin:0 0 0 .8ex;border-left:1px
#ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>
<div><br>
</div>
</div>
From your workstation can you use the
demo instance <a moz-do-not-send="true"
href="https://ipa.demo1.freeipa.org/ipa/ui/" target="_blank">https://ipa.demo1.freeipa.org/ipa/ui/</a>
or it returns the same error?<span><br>
<br>
<pre cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</span></div>
</blockquote>
</div>
<font face="monospace,monospace">Oh, sorry, I
didn't realize I was supposed to check that.
For the record, yes - I can log into the
demo instance on Firefox from my
workstation. For the sake of completeness, I
checked with Konquerer also and can log in
to the demo instance.<br>
<br>
</font></div>
<div class="gmail_extra"><font
face="monospace,monospace">Regards,<br>
Dan</font> <br>
</div>
</div>
</blockquote>
<br>
</div>
</div>
OK, so it seems that something is really broken on that
server.<br>
May be it is easier to start over - up to you. If you
want to continue troubleshooting we are here to help.<span
class=""><br>
<br>
<pre cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</span></div>
</blockquote>
</div>
<font face="monospace,monospace">IT WORKS! WOOT!<br>
<br>
</font></div>
<div class="gmail_extra"><font face="monospace,monospace">In the
steps of researching a small issue on another hypervisor, I
discovered that my underlying network, while operational,
was not properly configured. The IPA server and my
workstation were supposed to be talking in VLAN 100 and 110,
respectively. The network is temporarily configured to route
every packet it receives to the proper VLAN, no matter where
it originates.<br>
<br>
</font></div>
<div class="gmail_extra"><font face="monospace,monospace">My
workstation is indeed on VLAN 110, and is tagging the
packets appropriately. The server, however, due to a bridge
misconfiguration on the host, was on VLAN 1 and not sending
tagged packets at all. But as the router is configured to
route all appropriate packets it appeared to be operating
normally.<br>
<br>
</font></div>
<div class="gmail_extra"><font face="monospace,monospace">I blew
away the network configuration on the host and rebuilt it
again, this time ensuring that VLAN 1 was not available on
that switch port, and that the packets leaving the host were
tagged with VLAN 100. I brought the IPA server back up and
was able to log in.<br>
<br>
</font></div>
<div class="gmail_extra"><font face="monospace,monospace">So,
chalk this one up to misrouted packets. I didn't even think
to look there, the 401 error gave no clue that networking
may be the issue.<br>
<br>
</font></div>
<div class="gmail_extra"><font face="monospace,monospace">Regards,<br>
</font></div>
<div class="gmail_extra"><font face="monospace,monospace">Dan
Mossor<br>
</font></div>
</div>
</blockquote>
<br>
I am glad that this hunt is over :-)<br>
Have a nice weekend!<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>