<div dir="ltr"> <div class="gmail_extra"> <div class="gmail_quote">On Fri, Feb 24, 2017 at 5:41 PM, Petr Vobornik <<a href="mailto:pvoborni@redhat.com" target="_blank">pvoborni@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 02/24/2017 05:13 PM, Iulian Roman wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> On Fri, Feb 24, 2017 at 4:55 PM, Petr Vobornik <<a href="mailto:pvoborni@redhat.com" target="_blank">pvoborni@redhat.com</a> <div><div class="h5"> <mailto:<a href="mailto:pvoborni@redhat.com" target="_blank">pvoborni@redhat.com</a>>> wrote: On 02/24/2017 12:15 PM, Iulian Roman wrote: Hello, After a successful installation of the ipa-server when i try to login via WEB UI i've noticed that the web page looks strange (wrong fonts and page seems not completely/correctly loaded). The network debugger in chrome/firefox does So it won't be browser or extension related. The only possibility is to have same extension on both browsers. display 2 errors : - json /ipa/session/ 401 Unauthorized This is expected. - login _kerberos?=... net::ERR_ACCESS_DENIED This one should return also "401 Unauthorized" if you don't have SSO configured on browser or SSO(kerberos) ticket. net::ERR_ACCESS_DENIED indicates something wrong. Maybe some other software interferes in the communication with server. What OS it is? Could there be an overzealous antivirus (the web check part). Or maybe a custom proxy setting? it behaves the same from all browsers (firefox,chrome) and from both Linux and windows. i do use proxy, but trying with the firefox directly from the ipa server - therefore without proxy - does have the same result. I do not intend to use SSO for login into WEBUI (although it is the default in the ipa version i am using) but apparently a supported method to disable it is not known. Right, it is not currently possible. I've opened RFE ticket. <a href="https://fedorahosted.org/freeipa/ticket/6709" rel="noreferrer" target="_blank">https://fedorahosted.org/freeipa/ticket/6709</a> <<a href="https://fedorahosted.org/freeipa/ticket/6709" rel="noreferrer" target="_blank">https://fedorahosted.org/freeipa/ticket/6709</a>> Please comment if you use case is different than the proposed user story. I can login with user and password but the WEB UI is almost unusable because of wrongly loaded page . I wonder if something did not temper in the loaded files. If all files are loaded correctly and if it is fresh install(to mitigate possibility of old cache) then it is weird. Maybe it is the antivirus. i wonder too. the strange thing is that from the same browser i can access properly a different ipa server (which i've configured some time ago). Do you have some Web UI plugin installed on IPA server? it is default installation. How can i check which plugins are installed ? </div></div></blockquote> Plugins are in /usr/share/ipa/ui/js/plugins/ if the directory is empty then there is no plugin. </blockquote><div>i've just checked and there are no plugins installed. </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> But plugin would not cause: login _kerberos?=... net::ERR_ACCESS_DENIED</blockquote><div>indeed, but what would cause that ? it quite strange and i am almost clueless. i try to narrow it down and in my opinion the issues is most probably on the server side, but i have no evidence for that so far. </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5"> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Did anyone experience the same issue and is there any fix/solution for that ? -- Petr Vobornik Associate Manager, Engineering, Identity Management Red Hat, Inc. </blockquote> -- Petr Vobornik Associate Manager, Engineering, Identity Management Red Hat, Inc. </div></div></blockquote></div> </div></div>