<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
I was guessing that it was a problem with mod_auth_gssapi and so I tried switching the auth method back to mod_auth_kerb which did not work. (although it is entirely possible that I did not switch it correctly)
<div class=""><br class="">
</div>
<div class="">I did it by changing the gssapi settings in /etc/httpd/conf.d/ipa.conf to:</div>
<div class="">
<div class=""><Location "/ipa"></div>
<div class=""> AuthType Kerberos</div>
<div class=""> AuthName "Kerberos Login"</div>
<div class=""> KrbMethodNegotiate on</div>
<div class=""> KrbMethodK5Passwd off</div>
<div class=""> KrbServiceName HTTP</div>
<div class=""> KrbAuthRealms $realm</div>
<div class=""> Krb5KeyTab /etc/httpd/conf/ipa.keytab</div>
<div class=""> KrbSaveCredentials on</div>
<div class=""> KrbConstrainedDelegation on</div>
<div class=""> Require valid-user</div>
<div class=""> ErrorDocument 401 /ipa/errors/unauthorized.html</div>
<div class=""></Location></div>
</div>
<div class="">It just seemed to cause other problems...</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Jan 28, 2016, at 1:44 PM, Izzo, Anthony <<a href="mailto:aizzo01@harris.com" class="">aizzo01@harris.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">I should add that some of my team members have tried serializing their instance launches, and this problem does not seem to occur under those circumstances.
(That’s not a solution, just a data point for those interested in this behavior). Thanks.<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""> </span></div>
<div class="">
<div style="border-style: solid none none; border-top-color: rgb(225, 225, 225); border-top-width: 1pt; padding: 3pt 0in 0in;" class="">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<b class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class="">From:</span></b><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="Apple-converted-space"> </span>Izzo, Anthony (U.S. Person)<span class="Apple-converted-space"> </span><br class="">
<b class="">Sent:</b><span class="Apple-converted-space"> </span>Thursday, January 28, 2016 1:35 PM<br class="">
<b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:freeipa-users@redhat.com" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">freeipa-users@redhat.com</a><br class="">
<b class="">Cc:</b><span class="Apple-converted-space"> </span>'David Zabner' <<a href="mailto:david@cazena.com" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">david@cazena.com</a>><br class="">
<b class="">Subject:</b><span class="Apple-converted-space"> </span>RE: [Freeipa-users] Server error with multiple clients joining domain simultaneously<o:p class=""></o:p></span></div>
</div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<o:p class=""> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">Yes, that’s it!<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""> </span></div>
<div class="">
<div style="border-style: solid none none; border-top-color: rgb(225, 225, 225); border-top-width: 1pt; padding: 3pt 0in 0in;" class="">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<b class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class="">From:</span></b><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="Apple-converted-space"> </span>David Zabner [<a href="mailto:david@cazena.com" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">mailto:david@cazena.com</a>]<span class="Apple-converted-space"> </span><br class="">
<b class="">Sent:</b><span class="Apple-converted-space"> </span>Thursday, January 28, 2016 1:31 PM<br class="">
<b class="">To:</b><span class="Apple-converted-space"> </span>Izzo, Anthony (U.S. Person) <<a href="mailto:aizzo01@harris.com" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">aizzo01@harris.com</a>><br class="">
<b class="">Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:freeipa-users@redhat.com" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">freeipa-users@redhat.com</a><br class="">
<b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [Freeipa-users] Server error with multiple clients joining domain simultaneously<o:p class=""></o:p></span></div>
</div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<o:p class=""> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
This sounds exactly like the problem I am having. I will attach my error log. Is this what yours looks like?<o:p class=""></o:p></div>
</div>
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Manage
your subscription for the Freeipa-users mailing list:</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class=""><a href="https://www.redhat.com/mailman/listinfo/freeipa-users" class="">https://www.redhat.com/mailman/listinfo/freeipa-users</a></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Go
to <a href="http://freeipa.org" class="">http://freeipa.org</a> for more info on the project</span></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>