<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">From the cli - it looks like the answers I’m getting are actually coming from one of my non-upgraded servers.The window for those servers is later tonight. The request gets denied on the localhost it seems. <div class=""><br class=""></div><div class="">(Lb3 is the local server. Ipa11 is offsite server that has not been upgraded)</div><div class=""><br class=""></div><div class=""><div class="">[pfuller@lb3 ~]$ ipa -vvv user-show admin</div><div class="">ipa: INFO: trying <a href="https://lb3.sac.3si/ipa/json" class="">https://lb3.sac.3si/ipa/json</a></div><div class="">ipa: INFO: Request: {</div><div class=""> "id": 0,</div><div class=""> "method": "ping",</div><div class=""> "params": [</div><div class=""> [],</div><div class=""> {}</div><div class=""> ]</div><div class="">}</div><div class="">send: u'POST /ipa/json HTTP/1.1\r\nHost: lb3.sac.3si\r\nAccept-Encoding: gzip\r\nAccept-Language: en-us\r\nReferer: <a href="https://lb3.sac.3si/ipa/xml\r\nAuthorization:" class="">https://lb3.sac.3si/ipa/xml\r\nAuthorization:</a> negotiate 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\r\nUser-Agent: xmlrpclib.py/1.0.1 (by <a href="http://www.pythonware.com" class="">www.pythonware.com</a>)\r\nContent-Type: application/json\r\nContent-Length: 47\r\n\r\n{"params": [[], {}], "method": "ping", "id": 0}'</div><div class="">reply: 'HTTP/1.1 400 Bad Request\r\n'</div><div class="">header: Date: Mon, 08 May 2017 18:04:19 GMT</div><div class="">header: Server: Apache/2.4.6 (CentOS) mod_auth_gssapi/1.4.0 mod_auth_kerb/5.4 mod_nss/1.0.14 NSS/3.21 Basic ECC mod_wsgi/3.4 Python/2.7.5</div><div class="">header: Content-Length: 347</div><div class="">header: Connection: close</div><div class="">header: Content-Type: text/html; charset=iso-8859-1</div><div class="">ipa: INFO: trying <a href="https://ipa11.be.3si/ipa/json" class="">https://ipa11.be.3si/ipa/json</a></div><div class="">ipa: INFO: Request: {</div><div class=""> "id": 0,</div><div class=""> "method": "ping",</div><div class=""> "params": [</div><div class=""> [],</div><div class=""> {}</div><div class=""> ]</div><div class="">}</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Not seeing much in the http logs</div><div class=""><br class=""></div><div class=""><div class="">[Mon May 08 10:59:12.855952 2017] [mpm_prefork:notice] [pid 25471] AH00170: caught SIGWINCH, shutting down gracefully</div><div class="">[Mon May 08 10:59:14.776824 2017] [suexec:notice] [pid 26007] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)</div><div class="">[Mon May 08 10:59:14.777094 2017] [:warn] [pid 26007] NSSSessionCacheTimeout is deprecated. Ignoring.</div><div class="">[Mon May 08 10:59:15.044478 2017] [auth_digest:notice] [pid 26007] AH01757: generating secret for digest authentication ...</div><div class="">[Mon May 08 10:59:15.045068 2017] [lbmethod_heartbeat:notice] [pid 26007] AH02282: No slotmem from mod_heartmonitor</div><div class="">[Mon May 08 10:59:15.045085 2017] [:warn] [pid 26007] NSSSessionCacheTimeout is deprecated. Ignoring.</div><div class="">[Mon May 08 10:59:15.053163 2017] [mpm_prefork:notice] [pid 26007] AH00163: Apache/2.4.6 (CentOS) mod_auth_gssapi/1.4.0 mod_auth_kerb/5.4 mod_nss/1.0.14 NSS/3.21 Basic ECC mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations</div><div class="">[Mon May 08 10:59:15.053200 2017] [core:notice] [pid 26007] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'</div><div class="">[Mon May 08 10:59:15.321418 2017] [:error] [pid 26014] ipa: DEBUG: importing all plugin modules in ipaserver.plugins...</div><div class="">[Mon May 08 10:59:15.322362 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.aci</div><div class="">[Mon May 08 10:59:15.345957 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.automember</div><div class="">[Mon May 08 10:59:15.364950 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.automount</div><div class="">[Mon May 08 10:59:15.370011 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.baseldap</div><div class="">[Mon May 08 10:59:15.370124 2017] [:error] [pid 26014] ipa: DEBUG: ipaserver.plugins.baseldap is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.370198 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.baseuser</div><div class="">[Mon May 08 10:59:15.404084 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.batch</div><div class="">[Mon May 08 10:59:15.404901 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module <a href="http://ipaserver.plugins.ca" class="">ipaserver.plugins.ca</a></div><div class="">[Mon May 08 10:59:15.451277 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.caacl</div><div class="">[Mon May 08 10:59:15.451621 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.cert</div><div class="">[Mon May 08 10:59:15.451817 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.certprofile</div><div class="">[Mon May 08 10:59:15.451978 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.config</div><div class="">[Mon May 08 10:59:15.462890 2017] [:error] [pid 26013] ipa: DEBUG: importing all plugin modules in ipaserver.plugins...</div><div class="">[Mon May 08 10:59:15.463836 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.aci</div><div class="">[Mon May 08 10:59:15.471193 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.delegation</div><div class="">[Mon May 08 10:59:15.473733 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.dns</div><div class="">[Mon May 08 10:59:15.487747 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.automember</div><div class="">[Mon May 08 10:59:15.545605 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.automount</div><div class="">[Mon May 08 10:59:15.551746 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.baseldap</div><div class="">[Mon May 08 10:59:15.551868 2017] [:error] [pid 26013] ipa: DEBUG: ipaserver.plugins.baseldap is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.551933 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.baseuser</div><div class="">[Mon May 08 10:59:15.585986 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.batch</div><div class="">[Mon May 08 10:59:15.586780 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module <a href="http://ipaserver.plugins.ca" class="">ipaserver.plugins.ca</a></div><div class="">[Mon May 08 10:59:15.618924 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.caacl</div><div class="">[Mon May 08 10:59:15.619251 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.cert</div><div class="">[Mon May 08 10:59:15.619444 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.certprofile</div><div class="">[Mon May 08 10:59:15.619593 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.config</div><div class="">[Mon May 08 10:59:15.628108 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.delegation</div><div class="">[Mon May 08 10:59:15.630461 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.dns</div><div class="">[Mon May 08 10:59:15.638060 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.dnsserver</div><div class="">[Mon May 08 10:59:15.639672 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.dogtag</div><div class="">[Mon May 08 10:59:15.702799 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.domainlevel</div><div class="">[Mon May 08 10:59:15.704065 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.group</div><div class="">[Mon May 08 10:59:15.734874 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.hbac</div><div class="">[Mon May 08 10:59:15.735067 2017] [:error] [pid 26014] ipa: DEBUG: ipaserver.plugins.hbac is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.735130 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.hbacrule</div><div class="">[Mon May 08 10:59:15.735438 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.hbacsvc</div><div class="">[Mon May 08 10:59:15.736517 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.hbacsvcgroup</div><div class="">[Mon May 08 10:59:15.739023 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.hbactest</div><div class="">[Mon May 08 10:59:15.741672 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.host</div><div class="">[Mon May 08 10:59:15.753983 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.hostgroup</div><div class="">[Mon May 08 10:59:15.754187 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.idrange</div><div class="">[Mon May 08 10:59:15.757489 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.idviews</div><div class="">[Mon May 08 10:59:15.757839 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.internal</div><div class="">[Mon May 08 10:59:15.761469 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.join</div><div class="">[Mon May 08 10:59:15.762598 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.krbtpolicy</div><div class="">[Mon May 08 10:59:15.763800 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.ldap2</div><div class="">[Mon May 08 10:59:15.764794 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.location</div><div class="">[Mon May 08 10:59:15.766411 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.migration</div><div class="">[Mon May 08 10:59:15.770396 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.dnsserver</div><div class="">[Mon May 08 10:59:15.771955 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.dogtag</div><div class="">[Mon May 08 10:59:15.775364 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.misc</div><div class="">[Mon May 08 10:59:15.776219 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.netgroup</div><div class="">[Mon May 08 10:59:15.776408 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.otp</div><div class="">[Mon May 08 10:59:15.776572 2017] [:error] [pid 26014] ipa: DEBUG: ipaserver.plugins.otp is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.776635 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.otpconfig</div><div class="">[Mon May 08 10:59:15.777846 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.otptoken</div><div class="">[Mon May 08 10:59:15.783145 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.passwd</div><div class="">[Mon May 08 10:59:15.784323 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.permission</div><div class="">[Mon May 08 10:59:15.791777 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.ping</div><div class="">[Mon May 08 10:59:15.792052 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.pkinit</div><div class="">[Mon May 08 10:59:15.792211 2017] [:error] [pid 26014] ipa: DEBUG: ipaserver.plugins.pkinit is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.792278 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.privilege</div><div class="">[Mon May 08 10:59:15.792476 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.pwpolicy</div><div class="">[Mon May 08 10:59:15.794119 2017] [:error] [pid 26014] ipa: DEBUG: Starting external process</div><div class="">[Mon May 08 10:59:15.794199 2017] [:error] [pid 26014] ipa: DEBUG: args=klist -V</div><div class="">[Mon May 08 10:59:15.799162 2017] [:error] [pid 26014] ipa: DEBUG: Process finished, return code=0</div><div class="">[Mon May 08 10:59:15.799259 2017] [:error] [pid 26014] ipa: DEBUG: stdout=Kerberos 5 version 1.14.1</div><div class="">[Mon May 08 10:59:15.799265 2017] [:error] [pid 26014]</div><div class="">[Mon May 08 10:59:15.799321 2017] [:error] [pid 26014] ipa: DEBUG: stderr=</div><div class="">[Mon May 08 10:59:15.802573 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.rabase</div><div class="">[Mon May 08 10:59:15.802689 2017] [:error] [pid 26014] ipa: DEBUG: ipaserver.plugins.rabase is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.802750 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.radiusproxy</div><div class="">[Mon May 08 10:59:15.805507 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.realmdomains</div><div class="">[Mon May 08 10:59:15.809372 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.role</div><div class="">[Mon May 08 10:59:15.810962 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.schema</div><div class="">[Mon May 08 10:59:15.837359 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.domainlevel</div><div class="">[Mon May 08 10:59:15.838697 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.group</div><div class="">[Mon May 08 10:59:15.845807 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.selfservice</div><div class="">[Mon May 08 10:59:15.847834 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.selinuxusermap</div><div class="">[Mon May 08 10:59:15.848073 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.server</div><div class="">[Mon May 08 10:59:15.869002 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.hbac</div><div class="">[Mon May 08 10:59:15.869202 2017] [:error] [pid 26013] ipa: DEBUG: ipaserver.plugins.hbac is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.869281 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.hbacrule</div><div class="">[Mon May 08 10:59:15.869568 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.hbacsvc</div><div class="">[Mon May 08 10:59:15.870643 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.hbacsvcgroup</div><div class="">[Mon May 08 10:59:15.873201 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.hbactest</div><div class="">[Mon May 08 10:59:15.875843 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.host</div><div class="">[Mon May 08 10:59:15.888407 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.hostgroup</div><div class="">[Mon May 08 10:59:15.888593 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.idrange</div><div class="">[Mon May 08 10:59:15.891897 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.idviews</div><div class="">[Mon May 08 10:59:15.892257 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.internal</div><div class="">[Mon May 08 10:59:15.895872 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.join</div><div class="">[Mon May 08 10:59:15.897012 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.krbtpolicy</div><div class="">[Mon May 08 10:59:15.898211 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.ldap2</div><div class="">[Mon May 08 10:59:15.899184 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.location</div><div class="">[Mon May 08 10:59:15.900768 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.migration</div><div class="">[Mon May 08 10:59:15.909770 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.misc</div><div class="">[Mon May 08 10:59:15.910620 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.netgroup</div><div class="">[Mon May 08 10:59:15.910806 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.otp</div><div class="">[Mon May 08 10:59:15.910969 2017] [:error] [pid 26013] ipa: DEBUG: ipaserver.plugins.otp is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.911032 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.otpconfig</div><div class="">[Mon May 08 10:59:15.912261 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.otptoken</div><div class="">[Mon May 08 10:59:15.917579 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.passwd</div><div class="">[Mon May 08 10:59:15.918743 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.permission</div><div class="">[Mon May 08 10:59:15.926286 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.ping</div><div class="">[Mon May 08 10:59:15.926569 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.pkinit</div><div class="">[Mon May 08 10:59:15.926719 2017] [:error] [pid 26013] ipa: DEBUG: ipaserver.plugins.pkinit is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.926783 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.privilege</div><div class="">[Mon May 08 10:59:15.926983 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.pwpolicy</div><div class="">[Mon May 08 10:59:15.928679 2017] [:error] [pid 26013] ipa: DEBUG: Starting external process</div><div class="">[Mon May 08 10:59:15.928750 2017] [:error] [pid 26013] ipa: DEBUG: args=klist -V</div><div class="">[Mon May 08 10:59:15.933325 2017] [:error] [pid 26013] ipa: DEBUG: Process finished, return code=0</div><div class="">[Mon May 08 10:59:15.933413 2017] [:error] [pid 26013] ipa: DEBUG: stdout=Kerberos 5 version 1.14.1</div><div class="">[Mon May 08 10:59:15.933418 2017] [:error] [pid 26013]</div><div class="">[Mon May 08 10:59:15.933474 2017] [:error] [pid 26013] ipa: DEBUG: stderr=</div><div class="">[Mon May 08 10:59:15.936616 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.rabase</div><div class="">[Mon May 08 10:59:15.936729 2017] [:error] [pid 26013] ipa: DEBUG: ipaserver.plugins.rabase is not a valid plugin module</div><div class="">[Mon May 08 10:59:15.936790 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.radiusproxy</div><div class="">[Mon May 08 10:59:15.939491 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.realmdomains</div><div class="">[Mon May 08 10:59:15.943097 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.role</div><div class="">[Mon May 08 10:59:15.944624 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.schema</div><div class="">[Mon May 08 10:59:15.978072 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.selfservice</div><div class="">[Mon May 08 10:59:15.980171 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.selinuxusermap</div><div class="">[Mon May 08 10:59:15.980410 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.server</div><div class="">[Mon May 08 10:59:16.249070 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.serverrole</div><div class="">[Mon May 08 10:59:16.250937 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.serverroles</div><div class="">[Mon May 08 10:59:16.251262 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.service</div><div class="">[Mon May 08 10:59:16.251595 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.servicedelegation</div><div class="">[Mon May 08 10:59:16.254904 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.session</div><div class="">[Mon May 08 10:59:16.256507 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.stageuser</div><div class="">[Mon May 08 10:59:16.258356 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.sudo</div><div class="">[Mon May 08 10:59:16.258539 2017] [:error] [pid 26014] ipa: DEBUG: ipaserver.plugins.sudo is not a valid plugin module</div><div class="">[Mon May 08 10:59:16.258602 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.sudocmd</div><div class="">[Mon May 08 10:59:16.259726 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.sudocmdgroup</div><div class="">[Mon May 08 10:59:16.261571 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.sudorule</div><div class="">[Mon May 08 10:59:16.269844 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.topology</div><div class="">[Mon May 08 10:59:16.274894 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.trust</div><div class="">[Mon May 08 10:59:16.286224 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.user</div><div class="">[Mon May 08 10:59:16.286572 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.vault</div><div class="">[Mon May 08 10:59:16.296978 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.virtual</div><div class="">[Mon May 08 10:59:16.297081 2017] [:error] [pid 26014] ipa: DEBUG: ipaserver.plugins.virtual is not a valid plugin module</div><div class="">[Mon May 08 10:59:16.297150 2017] [:error] [pid 26014] ipa: DEBUG: importing plugin module ipaserver.plugins.xmlserver</div><div class="">[Mon May 08 10:59:16.364668 2017] [:error] [pid 26014] ipa: DEBUG: SessionAuthManager.register: name=xmlserver_session_139942843997200</div><div class="">[Mon May 08 10:59:16.365568 2017] [:error] [pid 26014] ipa: DEBUG: SessionAuthManager.register: name=jsonserver_session_139942844019152</div><div class="">[Mon May 08 10:59:16.382070 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.serverrole</div><div class="">[Mon May 08 10:59:16.383939 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.serverroles</div><div class="">[Mon May 08 10:59:16.384270 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.service</div><div class="">[Mon May 08 10:59:16.384597 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.servicedelegation</div><div class="">[Mon May 08 10:59:16.387879 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.session</div><div class="">[Mon May 08 10:59:16.389506 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.stageuser</div><div class="">[Mon May 08 10:59:16.391398 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.sudo</div><div class="">[Mon May 08 10:59:16.391582 2017] [:error] [pid 26013] ipa: DEBUG: ipaserver.plugins.sudo is not a valid plugin module</div><div class="">[Mon May 08 10:59:16.391644 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.sudocmd</div><div class="">[Mon May 08 10:59:16.392779 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.sudocmdgroup</div><div class="">[Mon May 08 10:59:16.394587 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.sudorule</div><div class="">[Mon May 08 10:59:16.402782 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.topology</div><div class="">[Mon May 08 10:59:16.407910 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.trust</div><div class="">[Mon May 08 10:59:16.419428 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.user</div><div class="">[Mon May 08 10:59:16.419772 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.vault</div><div class="">[Mon May 08 10:59:16.430208 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.virtual</div><div class="">[Mon May 08 10:59:16.430311 2017] [:error] [pid 26013] ipa: DEBUG: ipaserver.plugins.virtual is not a valid plugin module</div><div class="">[Mon May 08 10:59:16.430372 2017] [:error] [pid 26013] ipa: DEBUG: importing plugin module ipaserver.plugins.xmlserver</div><div class="">[Mon May 08 10:59:16.451416 2017] [:error] [pid 26014] ipa: DEBUG: Mounting ipaserver.rpcserver.login_password() at '/session/login_password'</div><div class="">[Mon May 08 10:59:16.451555 2017] [:error] [pid 26014] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:16.497682 2017] [:error] [pid 26013] ipa: DEBUG: SessionAuthManager.register: name=xmlserver_session_139942843997200</div><div class="">[Mon May 08 10:59:16.498514 2017] [:error] [pid 26013] ipa: DEBUG: SessionAuthManager.register: name=jsonserver_session_139942844019152</div><div class="">[Mon May 08 10:59:16.582967 2017] [:error] [pid 26013] ipa: DEBUG: Mounting ipaserver.rpcserver.login_password() at '/session/login_password'</div><div class="">[Mon May 08 10:59:16.583114 2017] [:error] [pid 26013] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.103275 2017] [:error] [pid 26014] ipa: DEBUG: Mounting ipaserver.rpcserver.sync_token() at '/session/sync_token'</div><div class="">[Mon May 08 10:59:17.148714 2017] [:error] [pid 26014] ipa: DEBUG: Mounting ipaserver.rpcserver.change_password() at '/session/change_password'</div><div class="">[Mon May 08 10:59:17.234845 2017] [:error] [pid 26013] ipa: DEBUG: Mounting ipaserver.rpcserver.sync_token() at '/session/sync_token'</div><div class="">[Mon May 08 10:59:17.280518 2017] [:error] [pid 26013] ipa: DEBUG: Mounting ipaserver.rpcserver.change_password() at '/session/change_password'</div><div class="">[Mon May 08 10:59:17.397722 2017] [:error] [pid 26014] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver_session() at '/session/xml'</div><div class="">[Mon May 08 10:59:17.397862 2017] [:error] [pid 26014] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.397953 2017] [:error] [pid 26014] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.504097 2017] [:error] [pid 26014] ipa: DEBUG: Mounting ipaserver.rpcserver.login_kerberos() at '/session/login_kerberos'</div><div class="">[Mon May 08 10:59:17.504234 2017] [:error] [pid 26014] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.531236 2017] [:error] [pid 26013] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver_session() at '/session/xml'</div><div class="">[Mon May 08 10:59:17.531357 2017] [:error] [pid 26013] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.531447 2017] [:error] [pid 26013] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.602015 2017] [:error] [pid 26014] ipa: DEBUG: Mounting ipaserver.rpcserver.login_x509() at '/session/login_x509'</div><div class="">[Mon May 08 10:59:17.602158 2017] [:error] [pid 26014] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.638029 2017] [:error] [pid 26013] ipa: DEBUG: Mounting ipaserver.rpcserver.login_kerberos() at '/session/login_kerberos'</div><div class="">[Mon May 08 10:59:17.638166 2017] [:error] [pid 26013] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.665313 2017] [:error] [pid 26014] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver() at '/xml'</div><div class="">[Mon May 08 10:59:17.665430 2017] [:error] [pid 26014] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.736510 2017] [:error] [pid 26013] ipa: DEBUG: Mounting ipaserver.rpcserver.login_x509() at '/session/login_x509'</div><div class="">[Mon May 08 10:59:17.736656 2017] [:error] [pid 26013] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.737976 2017] [:error] [pid 26014] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_session() at '/session/json'</div><div class="">[Mon May 08 10:59:17.738089 2017] [:error] [pid 26014] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.799767 2017] [:error] [pid 26013] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver() at '/xml'</div><div class="">[Mon May 08 10:59:17.799902 2017] [:error] [pid 26013] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.800287 2017] [:error] [pid 26014] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_kerb() at '/json'</div><div class="">[Mon May 08 10:59:17.800404 2017] [:error] [pid 26014] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.872938 2017] [:error] [pid 26013] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_session() at '/session/json'</div><div class="">[Mon May 08 10:59:17.873074 2017] [:error] [pid 26013] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:17.935616 2017] [:error] [pid 26013] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_kerb() at '/json'</div><div class="">[Mon May 08 10:59:17.935746 2017] [:error] [pid 26013] ipa: DEBUG: session_auth_duration: 0:20:00</div><div class="">[Mon May 08 10:59:18.179768 2017] [:error] [pid 26014] ipa: INFO: *** PROCESS START ***</div><div class="">[Mon May 08 10:59:18.313005 2017] [:error] [pid 26013] ipa: INFO: *** PROCESS START ***</div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On May 8, 2017, at 1:57 PM, Rob Crittenden <<a href="mailto:rcritten@redhat.com" class="">rcritten@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Pete Fuller wrote:</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><blockquote type="cite" style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">http error log has nothing. This is with http restart and a failed<br class="">request for web ui. The request has no error. Is there a different log<br class="">that I am overlooking that might have more information?<br class=""></blockquote><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">No.</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Create /etc/ipa/server.conf with these contents:</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">[global]</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">debug = True</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Restart Apache.</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Try with a browser and see what gets logged, if anything.</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">I'd also try with the cli to compare. With the client you can add -vvv</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">to get a lot more client-side logging: ipa -vvv user-show admin</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">rob</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><blockquote type="cite" style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class=""><br class="">[Mon May 08 10:46:14.842162 2017] [:warn] [pid 25471]<br class="">NSSSessionCacheTimeout is deprecated. Ignoring.<br class="">[Mon May 08 10:46:15.136803 2017] [auth_digest:notice] [pid 25471]<br class="">AH01757: generating secret for digest authentication ...<br class="">[Mon May 08 10:46:15.137403 2017] [lbmethod_heartbeat:notice] [pid<br class="">25471] AH02282: No slotmem from mod_heartmonitor<br class="">[Mon May 08 10:46:15.137422 2017] [:warn] [pid 25471]<br class="">NSSSessionCacheTimeout is deprecated. Ignoring.<br class="">[Mon May 08 10:46:15.145343 2017] [mpm_prefork:notice] [pid 25471]<br class="">AH00163: Apache/2.4.6 (CentOS) mod_auth_gssapi/1.4.0 mod_auth_kerb/5.4<br class="">mod_nss/1.0.14 NSS/3.21 Basic ECC mod_wsgi/3.4 Python/2.7.5 configured<br class="">-- resuming normal operations<br class="">[Mon May 08 10:46:15.145378 2017] [core:notice] [pid 25471] AH00094:<br class="">Command line: '/usr/sbin/httpd -D FOREGROUND'<br class="">[Mon May 08 10:46:18.234880 2017] [:error] [pid 25476] ipa: INFO: ***<br class="">PROCESS START ***<br class="">[Mon May 08 10:46:18.431700 2017] [:error] [pid 25475] ipa: INFO: ***<br class="">PROCESS START **<br class=""><br class=""><br class=""><br class=""><blockquote type="cite" class="">On May 8, 2017, at 1:43 PM, Rob Crittenden <<a href="mailto:rcritten@redhat.com" class="">rcritten@redhat.com</a><br class=""><<a href="mailto:rcritten@redhat.com" class="">mailto:rcritten@redhat.com</a>>> wrote:<br class=""><br class="">Pete Fuller wrote:<br class=""><blockquote type="cite" class="">IPA command line seems to work. Have been able to use ipa user-find<br class="">and ipa cert-find. Can also sudo and kinit from other machines as<br class="">IPA user.<br class=""><br class="">Another clue here, looks like even when querying with the ipa cli tools,<br class="">I’m getting 400 errors in the access logs. The top one is obviously a<br class="">browser request. The next 4 were following a cli call to ipa user-find.<br class="">That request does respond back with users, so not sure what is failing<br class="">there. The 192.168.0.95 IP is the local ip of the IPA server itself.<span class="Apple-converted-space"> </span><br class=""><br class="">192.168.51.20 - - [08/May/2017:10:31:46 -0700] "GET / HTTP/1.1" 400 347<br class="">"-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:53.0)<br class="">Gecko/20100101 Firefox/53.0"<br class="">192.168.0.95 - - [08/May/2017:10:32:40 -0700] "POST /ipa/json HTTP/1.1"<br class="">400 347<br class="">192.168.0.95 - - [08/May/2017:10:32:43 -0700] "POST /ipa/json HTTP/1.1"<br class="">400 347<br class="">192.168.0.95 - - [08/May/2017:10:33:01 -0700] "POST /ipa/json HTTP/1.1"<br class="">400 347<br class="">192.168.0.95 - - [08/May/2017:10:33:10 -0700] "POST /ipa/json HTTP/1.1"<br class="">400 347<br class=""></blockquote><br class="">Note that client activity (login, sudo, etc) does not go through Apache.<br class="">Only the IPA API does (so web UI and cli).<br class=""><br class="">Still need to see the error log.<br class=""><br class="">rob<br class=""><br class=""><blockquote type="cite" class=""><br class=""><br class=""><blockquote type="cite" class="">On May 8, 2017, at 1:20 PM, Rob Crittenden <<a href="mailto:rcritten@redhat.com" class="">rcritten@redhat.com</a><br class=""><<a href="mailto:rcritten@redhat.com" class="">mailto:rcritten@redhat.com</a>><br class=""><<a href="mailto:rcritten@redhat.com" class="">mailto:rcritten@redhat.com</a>>> wrote:<br class=""><br class="">Pete Fuller wrote:<br class=""><blockquote type="cite" class="">I ran the 4.4 upgrade yesterday on a group of Centos7 servers that are<br class="">IPA replicas for my North American datacenters. All seem to have the<br class="">same issue that I am now unable to connect to the web UI, with the<br class="">following error in the browser…<br class=""><br class=""><br class="">Bad Request<br class=""><br class="">Your browser sent a request that this server could not understand.<br class=""><br class="">Additionally, a 400 Bad Request error was encountered while trying to<br class="">use an ErrorDocument to handle the request.<br class=""><br class=""><br class=""><br class="">The maddening thing is I can’t find any reference in the apache logs to<br class="">what is generating the error and why a direct request to the UI would<br class="">error.<span class="Apple-converted-space"> </span><br class=""><br class="">As far as I can tell IPA is otherwise working. Logins seem to work,<br class="">sudo rules are working, DNS is working. <br class=""><br class="">[root@lb3 httpd]# ipactl status<br class="">Directory Service: RUNNING<br class="">krb5kdc Service: RUNNING<br class="">kadmin Service: RUNNING<br class="">named Service: RUNNING<br class="">ipa_memcached Service: RUNNING<br class="">httpd Service: RUNNING<br class="">ipa-custodia Service: RUNNING<br class="">ntpd Service: RUNNING<br class="">pki-tomcatd Service: RUNNING<br class="">ipa-otpd Service: RUNNING<br class="">ipa-dnskeysyncd Service: RUNNING<br class=""><br class="">I can see one file in the httpd/conf.d directory that was changed -<br class="">nss.conf. I attempted reverting and that did not work.<br class=""><br class="">Has anyone run upon this error? <br class=""></blockquote><br class="">Does the ipa command-line tool work?<br class=""><br class="">What are you seeing in the Apache error log?<br class=""><br class="">rob</blockquote></blockquote></blockquote></blockquote></div></blockquote></div><br class=""></div></div></body></html>