<div dir="ltr">Hi Martin,<div> </div><div>thanks for your replay.</div><div> </div><div>yesterday i did lot of this to fix this issue.</div><div> </div><div>the issue has been solved by kdestroy and re-initiate the ticket.</div><div> </div><div>after that restarted ipa service, it got worked</div><div> </div><div>Regards,</div><div>ben</div></div><div class="gmail_extra"> <div class="gmail_quote">On Mon, Mar 9, 2015 at 10:57 AM, Martin Kosek <<a href="mailto:mkosek@redhat.com" target="_blank">mkosek@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Thanks for all the data. So it looks like your browser properly forward the session cookie, but it is not recognized on the server even though it was stored before. Especially these lines are strange: [Sun Mar 08 13:16:29.<a href="tel:909637%202015" value="+919096372015">909637 2015</a>] [:error] [pid 3004] ipa: DEBUG: store session: session_id=4803e184cecb42f2e326391dbb09443d start_timestamp=2015-03-08T13:15:12 access_timestamp=2015-03-08T13:16:29 expiration_timestamp=2015-03-08T13:36:29 ... [Sun Mar 08 13:16:29.<a href="tel:921519%202015" value="+919215192015">921519 2015</a>] [:error] [pid 3003] ipa: DEBUG: found session cookie_id = 4803e184cecb42f2e326391dbb09443d [Sun Mar 08 13:16:29.921731 2015] [:error] [pid 3003] ipa: DEBUG: no session data in cache with id=4803e184cecb42f2e326391dbb09443d, generating empty session data We know that ipa_memcached is running. Can you please also check if there are no SELinux errors in /var/log/audit/audit.log preveting Apache from looking up the session data? Thanks, Martin <div class="HOEnZb"><div class="h5"> On 03/08/2015 11:44 AM, Ben .T.George wrote: > i was inspecting the page and got below response. > > <a href="http://s21.postimg.org/itv5hf0h3/asdasd.jpg" target="_blank">http://s21.postimg.org/itv5hf0h3/asdasd.jpg</a> > > <a href="http://s3.postimg.org/f6knomt1f/Capture.jpg" target="_blank">http://s3.postimg.org/f6knomt1f/Capture.jpg</a> > > please anyone help me to solve this issue. i just want to create one local > user in IPA > > On Sun, Mar 8, 2015 at 1:17 PM, Ben .T.George <<a href="mailto:bentech4you@gmail.com">bentech4you@gmail.com</a>> wrote: > >> I enabled debugging mode on default.conf and this is what i am getting on >> error_log >> >> [Sun Mar 08 13:16:18.<a href="tel:204363%202015" value="+912043632015">204363 2015</a>] [auth_kerb:error] [pid 3065] [client >> <a href="http://172.16.107.250:60088" target="_blank">172.16.107.250:60088</a>] gss_accept_sec_context() failed: An unsupported >> mechanism was requested (, Unknown error), referer: >> <a href="https://kwtpocpbis01.solaris.local/ipa/ui/" target="_blank">https://kwtpocpbis01.solaris.local/ipa/ui/</a> >> [Sun Mar 08 13:16:29.<a href="tel:849339%202015" value="+918493392015">849339 2015</a>] [:error] [pid 3004] ipa: DEBUG: WSGI >> wsgi_dispatch.__call__: >> [Sun Mar 08 13:16:29.849458 2015] [:error] [pid 3004] ipa: DEBUG: WSGI >> login_password.__call__: >> [Sun Mar 08 13:16:29.849683 2015] [:error] [pid 3004] ipa: DEBUG: >> Obtaining armor ccache: >> principal=HTTP/kwtpocpbis01.solaris.local@SOLARIS.LOCAL >> keytab=/etc/httpd/conf/ipa.keytab >> ccache=/var/run/ipa_memcached/krbcc_A_admin >> [Sun Mar 08 13:16:29.<a href="tel:849830%202015" value="+918498302015">849830 2015</a>] [:error] [pid 3004] ipa: DEBUG: Starting >> external process >> [Sun Mar 08 13:16:29.849923 2015] [:error] [pid 3004] ipa: DEBUG: >> args='/usr/bin/kinit' '-kt' '/etc/httpd/conf/ipa.keytab' >> 'HTTP/kwtpocpbis01.solaris.local@SOLARIS.LOCAL' >> [Sun Mar 08 13:16:29.<a href="tel:868747%202015" value="+918687472015">868747 2015</a>] [:error] [pid 3004] ipa: DEBUG: Process >> finished, return code=0 >> [Sun Mar 08 13:16:29.868858 2015] [:error] [pid 3004] ipa: DEBUG: stdout= >> [Sun Mar 08 13:16:29.868955 2015] [:error] [pid 3004] ipa: DEBUG: stderr= >> [Sun Mar 08 13:16:29.869120 2015] [:error] [pid 3004] ipa: DEBUG: Starting >> external process >> [Sun Mar 08 13:16:29.869204 2015] [:error] [pid 3004] ipa: DEBUG: >> args='/usr/bin/kinit' 'admin@SOLARIS.LOCAL' '-T' >> '/var/run/ipa_memcached/krbcc_A_admin' >> [Sun Mar 08 13:16:29.<a href="tel:902181%202015" value="+919021812015">902181 2015</a>] [:error] [pid 3004] ipa: DEBUG: Process >> finished, return code=0 >> [Sun Mar 08 13:16:29.902269 2015] [:error] [pid 3004] ipa: DEBUG: >> stdout=Password for admin@SOLARIS.LOCAL: >> [Sun Mar 08 13:16:29.<a href="tel:902278%202015" value="+919022782015">902278 2015</a>] [:error] [pid 3004] >> [Sun Mar 08 13:16:29.902328 2015] [:error] [pid 3004] ipa: DEBUG: stderr= >> [Sun Mar 08 13:16:29.902427 2015] [:error] [pid 3004] ipa: DEBUG: kinit: >> principal=admin@SOLARIS.LOCAL returncode=0, stderr="" >> [Sun Mar 08 13:16:29.<a href="tel:902483%202015" value="+919024832015">902483 2015</a>] [:error] [pid 3004] ipa: DEBUG: Cleanup >> the armor ccache >> [Sun Mar 08 13:16:29.902560 2015] [:error] [pid 3004] ipa: DEBUG: Starting >> external process >> [Sun Mar 08 13:16:29.902621 2015] [:error] [pid 3004] ipa: DEBUG: >> args='/usr/bin/kdestroy' '-A' '-c' '/var/run/ipa_memcached/krbcc_A_admin' >> [Sun Mar 08 13:16:29.908045 2015] [:error] [pid 3004] ipa: DEBUG: Process >> finished, return code=0 >> [Sun Mar 08 13:16:29.908121 2015] [:error] [pid 3004] ipa: DEBUG: stdout= >> [Sun Mar 08 13:16:29.908173 2015] [:error] [pid 3004] ipa: DEBUG: stderr= >> [Sun Mar 08 13:16:29.908348 2015] [:error] [pid 3004] ipa: DEBUG: found >> session cookie_id = 4803e184cecb42f2e326391dbb09443d >> [Sun Mar 08 13:16:29.908647 2015] [:error] [pid 3004] ipa: DEBUG: found >> session data in cache with id=4803e184cecb42f2e326391dbb09443d >> [Sun Mar 08 13:16:29.908728 2015] [:error] [pid 3004] ipa: DEBUG: >> finalize_kerberos_acquisition: login_password >> ccache_name="FILE:/var/run/ipa_memcached/krbcc_3004" >> session_id="4803e184cecb42f2e326391dbb09443d" >> [Sun Mar 08 13:16:29.908824 2015] [:error] [pid 3004] ipa: DEBUG: reading >> ccache data from file "/var/run/ipa_memcached/krbcc_3004" >> [Sun Mar 08 13:16:29.909319 2015] [:error] [pid 3004] ipa: DEBUG: >> get_credential_times: principal=krbtgt/SOLARIS.LOCAL@SOLARIS.LOCAL, >> authtime=03/08/15 13:16:29, starttime=03/08/15 13:16:29, endtime=03/09/15 >> 13:16:29, renew_till=01/01/70 03:00:00 >> [Sun Mar 08 13:16:29.909415 2015] [:error] [pid 3004] ipa: DEBUG: >> KRB5_CCache FILE:/var/run/ipa_memcached/krbcc_3004 endtime=1425896189 >> (03/09/15 13:16:29) >> [Sun Mar 08 13:16:29.909538 2015] [:error] [pid 3004] ipa: DEBUG: >> set_session_expiration_time: duration_type=inactivity_timeout duration=1200 >> max_age=1425895889 expiration=1425810989.91 (2015-03-08T13:36:29) >> [Sun Mar 08 13:16:29.909637 2015] [:error] [pid 3004] ipa: DEBUG: store >> session: session_id=4803e184cecb42f2e326391dbb09443d >> start_timestamp=2015-03-08T13:15:12 access_timestamp=2015-03-08T13:16:29 >> expiration_timestamp=2015-03-08T13:36:29 >> [Sun Mar 08 13:16:29.910004 2015] [:error] [pid 3004] ipa: DEBUG: >> release_ipa_ccache: KRB5CCNAME environment variable not set >> [Sun Mar 08 13:16:29.921259 2015] [:error] [pid 3003] ipa: DEBUG: WSGI >> wsgi_dispatch.__call__: >> [Sun Mar 08 13:16:29.921351 2015] [:error] [pid 3003] ipa: DEBUG: WSGI >> jsonserver_session.__call__: >> [Sun Mar 08 13:16:29.921519 2015] [:error] [pid 3003] ipa: DEBUG: found >> session cookie_id = 4803e184cecb42f2e326391dbb09443d >> [Sun Mar 08 13:16:29.921731 2015] [:error] [pid 3003] ipa: DEBUG: no >> session data in cache with id=4803e184cecb42f2e326391dbb09443d, generating >> empty session data >> [Sun Mar 08 13:16:29.921875 2015] [:error] [pid 3003] ipa: DEBUG: store >> session: session_id=4803e184cecb42f2e326391dbb09443d >> start_timestamp=2015-03-08T13:16:29 access_timestamp=2015-03-08T13:16:29 >> expiration_timestamp=1970-01-01T03:00:00 >> [Sun Mar 08 13:16:29.922125 2015] [:error] [pid 3003] ipa: DEBUG: >> jsonserver_session.__call__: session_id=4803e184cecb42f2e326391dbb09443d >> start_timestamp=2015-03-08T13:16:29 access_timestamp=2015-03-08T13:16:29 >> expiration_timestamp=1970-01-01T03:00:00 >> [Sun Mar 08 13:16:29.922191 2015] [:error] [pid 3003] ipa: DEBUG: no >> ccache, need login >> [Sun Mar 08 13:16:29.922265 2015] [:error] [pid 3003] ipa: DEBUG: >> jsonserver_session: 401 Unauthorized need login >> >> >> On Sun, Mar 8, 2015 at 1:02 PM, Ben .T.George <<a href="mailto:bentech4you@gmail.com">bentech4you@gmail.com</a>> >> wrote: >> >>> this is the error mesage i am getting on httpd/error_log >>> >>> [Sun Mar 08 13:02:02.<a href="tel:965470%202015" value="+919654702015">965470 2015</a>] [auth_kerb:error] [pid 2922] [client >>> 172.16.107 >>> .250:60005] >>> gss_accept_sec_context() failed: An unsupported mechanism was request >>> >>> ed (, Unknown error), referer: >>> <a href="https://kwtpocpbis01.solaris.local/ipa/ui/" target="_blank">https://kwtpocpbis01.solaris.local/ipa/ui/</a> >>> >>> On Sun, Mar 8, 2015 at 12:48 PM, Ben .T.George <<a href="mailto:bentech4you@gmail.com">bentech4you@gmail.com</a>> >>> wrote: >>> >>>> Hi i checked the services and below is my output >>>> >>>> [root@kwtpocpbis01 ipa_memcached]# ps -ef | grep ipa_memcached >>>> apache 2079 1 0 11:11 ? 00:00:00 /usr/bin/memcached -d -s >>>> /var/run/ipa_memcached/ipa_memcached -u apache -m 64 -c 1024 -P >>>> /var/run/ipa_memcached/ipa_memcached.pid >>>> root 2801 2504 0 12:48 pts/0 00:00:00 grep --color=auto >>>> ipa_memcached >>>> >>>> [root@kwtpocpbis01 ipa_memcached]# ipactl status >>>> Directory Service: RUNNING >>>> krb5kdc Service: RUNNING >>>> kadmin Service: RUNNING >>>> named Service: RUNNING >>>> ipa_memcached Service: RUNNING >>>> httpd Service: RUNNING >>>> pki-tomcatd Service: RUNNING >>>> smb Service: RUNNING >>>> winbind Service: RUNNING >>>> ipa-otpd Service: RUNNING >>>> ipa-dnskeysyncd Service: RUNNING >>>> ipa: INFO: The ipactl command was successful >>>> >>>> >>>> On Sun, Mar 8, 2015 at 10:54 AM, Ben .T.George <<a href="mailto:bentech4you@gmail.com">bentech4you@gmail.com</a>> >>>> wrote: >>>> >>>>> HI >>>>> >>>>> i have free IPA 4.1.2 installed. >>>>> >>>>> my web ui always giving "Your session has expired. Please re-login." >>>>> even i tried from different computer.different browsers.. >>>>> >>>>> how can i fix this.? >>>>> >>>> >>>> >>> >> > > > </div></div></blockquote></div> </div>