<html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hello, it is caused by missing canonical name on services which were created in older versions of FreeIPA. Fixed ticket here: <a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/6397">https://fedorahosted.org/freeipa/ticket/6397</a> . <div class="moz-cite-prefix">On 12/07/2016 11:48 AM, Fujisan wrote: </div> <blockquote cite="mid:CANppd4N+0COf+nsE-f2goOcvg25mecvtLCQCdur8ZpNH5XW-+w@mail.gmail.com" type="cite"> <div dir="ltr"> <div class="gmail_default" style="font-family:arial,helvetica,sans-serif">And with Firefox 50.0.2. </div> <div class="gmail_default" style="font-family:arial,helvetica,sans-serif">F. </div> </div> <div class="gmail_extra"> <div class="gmail_quote">On Wed, Dec 7, 2016 at 11:46 AM, Fujisan <<a moz-do-not-send="true" href="mailto:fujisan43@gmail.com" target="_blank">fujisan43@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div dir="ltr"> <div class="gmail_default" style="font-family:arial,helvetica,sans-serif">I have the same issue with version 4.4.2 $ rpm -qa|grep freeipa freeipa-server-4.4.2-1.fc25.x86_64 freeipa-python-compat-4.4.2-1.fc25.noarch freeipa-server-common-4.4.2-1.fc25.noarch <a moz-do-not-send="true" href="http://freeipa-common-4.4.2-1.fc25.no">freeipa-common-4.4.2-1.fc25.no</a>arch freeipa-server-trust-ad-4.4.2-1.fc25.x86_64 freeipa-client-4.4.2-1.fc25.x86_64 freeipa-client-common-4.4.2-1.fc25.noarch </div> <div class="gmail_extra"> <div style="font-family:arial,helvetica,sans-serif" class="gmail_default">F.</div> <div class="gmail_quote"> <div> <div class="h5">On Wed, Dec 7, 2016 at 11:13 AM, Troels Hansen <<a moz-do-not-send="true" href="mailto:th@casalogic.dk" target="_blank">th@casalogic.dk</a>> wrote: </div> </div> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div> <div class="h5"> <div> <div style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:12pt"> <div> I have a strange issue in IPA 4.4.0-12 (RHEL 7.3) Navigating to Identity -> Services reveals 5 services. 2 cifs, 2 dogtag and one empty line... cifs/host1.domain@REALM cifs/host2.domain@REALM dogtag/ipa01.domain@REALM dogtag/ipa02.domain@REALM However, from CLI everything looks OK: # ipa service-find ------------------- 11 services matched ------------------- Principal name: ldap/ipa02.domain@REALM Principal alias: ldap/ipa02.domain@REALM Certificate: ....... ....... Keytab: True Principal name: ldap/ipa01.domain@REALM Principal alias: ldap/ipa01.domain@REALM Certificate: ....... ....... Keytab: True Principal name: HTTP/ipa02.domain@REALM Principal alias: HTTP/ipa02.domain@REALM Certificate: ........ ....... Keytab: True Principal name: cifs/rhellxudv01.domain@REALM Principal alias: cifs/rhellxudv01.domain@REALM Keytab: True Principal name: cifs/ipa02.domain@REALM Principal alias: cifs/ipa02.domain@REALM Keytab: True Principal name: nfs/profil01.domain@REALM Principal alias: nfs/profil01.domain@REALM Keytab: True Principal name: cifs/ipa01.domain@REALM Principal alias: cifs/ipa01.domain@REALM Keytab: True Principal name: dogtag/ipa02.domain@REALM Principal alias: dogtag/ipa02.domain@REALM Keytab: True Principal name: dogtag/ipa01.domain@REALM Principal alias: dogtag/ipa01.domain@REALM Keytab: True Principal name: cifs/rhellxudv02.domain@REALM Principal alias: cifs/rhellxudv02.domain@REALM Keytab: True Principal name: HTTP/ipa01.domain@REALM Principal alias: HTTP/ipa01.domain@REALM Certificate: .............. .............. Keytab: True ----------------------------- Number of entries returned 11 ----------------------------- (some lines truncated.....) soooo... somsthing must be disrupting the view in web-ui, Tried in Chrome 43 and IE 11 Looking at what gets requested by the browser at /ipa/session/json I can see in the json that it gets the correct content: result: {count: 11, result: [,…], summary: "11 services matched", truncated: false} count: 11 result: [,…] 0: {dn: "krbprincipalname=cifs/rhellxudv01.domain@REALM,cn=services,cn=accounts,dc=domain",…} 1: {dn: "krbprincipalname=dogtag/ipa01.domain@REALM,cn=services,cn=accounts,dc=domain",…} 2: {dn: "krbprincipalname=nfs/profil01.domain@REALM,cn=services,cn=accounts,dc=domain",…} 3: {dn: "krbprincipalname=cifs/rhellxudv02.domain@REALM,cn=services,cn=accounts,dc=domain",…} 4: {dn: "krbprincipalname=dogtag/ipa02.domain@REALM,cn=services,cn=accounts,dc=domain",…} 5: {dn: "krbprincipalname=HTTP/ipa01.domain@REALM,cn=services,cn=accounts,dc=domain",…} 6: {dn: "krbprincipalname=cifs/ipa02.domain@REALM,cn=services,cn=accounts,dc=domain",…} 7: {dn: "krbprincipalname=cifs/ipa01.domain@REALM,cn=services,cn=accounts,dc=domain",…} 8: {dn: "krbprincipalname=ldap/ipa01.domain@REALM,cn=services,cn=accounts,dc=domain",…} 9: {dn: "krbprincipalname=HTTP/ipa02.domain@REALM,cn=services,cn=accounts,dc=domain",…} 10: {dn: "krbprincipalname=ldap/ipa02.domain@REALM,cn=services,cn=accounts,dc=domain",…} summary: "11 services matched" truncated: false So this is obviously only a web-ui problem, but I can't see what causes the problem? </div> </div> </div> </div> </div> -- Manage your subscription for the Freeipa-users mailing list: <a moz-do-not-send="true" href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> Go to <a moz-do-not-send="true" href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project </blockquote> </div> </div> </div> </blockquote> </div> </div> <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> <pre class="moz-signature" cols="72">-- Pavel^3 Vomacka</pre> </body> </html>