<div dir="ltr">This seams to be caused by this directive in apache:<br><div><br>SSLUsername SSL_CLIENT_S_DN_CN<br><br><br></div><div>This is the generate certificate by pulp-admin:<br><br># openssl x509 -text -in ~/.pulp/user-cert.pem -noout<br>Certificate:<br> Data:<br> Version: 1 (0x0)<br> Serial Number: 2495 (0x9bf)<br> Signature Algorithm: sha1WithRSAEncryption<br> Issuer: CN=<a href="http://v-so-repo-01.company.com">v-so-repo-01.company.com</a>, O=PULP<br> Validity<br> Not Before: Mar 17 08:35:33 2016 GMT<br> Not After : Mar 24 08:35:33 2016 GMT<br> Subject: CN=admin:admin:5591d3ef988df07c2cb1c519<br> Subject Public Key Info:<br> Public Key Algorithm: rsaEncryption<br> Public-Key: (1024 bit)<br> Modulus:<br> 00:c1:78:fc:b6:7b:ef:d7:27:d0:ef:c4:4e:c4:24:<br> 27:b2:98:98:d5:ae:88:d4:c0:60:ea:e9:c2:38:00:<br> 06:04:91:d3:a6:c8:d1:92:75:f0:16:43:cb:d9:42:<br> a6:80:8c:96:03:eb:d6:3f:e6:3d:0f:d3:ad:08:67:<br> 5c:f0:7b:d7:0b:5e:d6:c9:6b:52:99:d9:d4:90:9f:<br> 8b:3d:f0:6d:82:8d:a7:4e:d9:80:9b:0f:a5:e9:09:<br> 1a:73:2c:6a:f1:eb:20:22:6d:22:25:47:74:1d:f3:<br> 14:6e:f8:6a:47:7d:8c:e4:c8:81:f1:9b:c1:63:dc:<br> 94:eb:e8:02:41:11:39:a6:bf<br> Exponent: 65537 (0x10001)<br> Signature Algorithm: sha1WithRSAEncryption<br> 12:6c:61:9c:2f:b0:09:1b:3b:6e:a9:96:a7:03:d5:3c:02:a3:<br> d1:c8:d1:b4:6c:4a:c6:6d:2b:8c:18:1f:8d:27:3a:7c:ff:6c:<br> b6:87:83:f3:b0:bb:ff:16:b7:50:0e:7e:9d:04:87:c0:f6:0b:<br> 0d:1f:38:d0:ae:1a:66:e5:3c:ef:55:44:ee:44:b1:ed:09:f0:<br> 8d:f2:bd:b0:cd:31:6a:5c:ce:35:b3:fb:bf:8d:87:72:97:0b:<br> fb:e6:e7:e1:f4:36:9d:06:08:28:b3:9a:15:6d:5c:1e:9f:27:<br> 6e:6f:bd:ad:f9:23:0f:90:35:1a:76:c3:24:a6:4c:73:87:f8:<br> 29:c1:2e:bb:1e:31:57:14:fc:07:2a:44:82:48:fd:22:20:e6:<br> 9d:ac:5a:77:3c:5e:20:51:cb:1a:3b:ea:be:ae:73:46:61:c6:<br> 6c:00:1a:ac:a9:a0:ea:97:1f:83:dd:95:c9:03:b9:b2:b6:b7:<br> b3:d8:5d:47:cb:5e:72:35:3d:67:3c:4c:8a:bf:7e:86:4a:a9:<br> 1f:2f:df:de:5e:a9:13:b0:72:f0:1c:20:32:df:a4:c1:c1:82:<br> 0b:41:42:f9:44:e1:60:c1:20:1f:34:4b:1b:1d:3b:49:83:7e:<br> ee:1f:ed:4b:9f:21:12:c5:b1:2b:c0:96:d0:77:b9:b5:6a:cc:<br><br><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Mar 17, 2016 at 9:50 AM, Cristian Falcas <span dir="ltr"><<a href="mailto:cristi.falcas@gmail.com" target="_blank">cristi.falcas@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>Hello,<br><br></div>We upgraded pulp to 2.8 from 2.7 and we have some problems with pulp-admin commands. We used puppet to do the upgrade.<br><br></div>Login works:<br><br># pulp-admin login -u admin -p admin<br>Successfully logged in. Session certificate will expire at Mar 24 07:41:24 2016<br>GMT.<br><br><div><div><div><div>But listing taks, repos and looks like all other commands fail:<br></div><div><br># pulp-admin tasks list<br>+----------------------------------------------------------------------+<br> Tasks<br>+----------------------------------------------------------------------+<br><br>The specified user does not have permission to execute the given command<br><br><br></div><div>This is the message from journald logs:<br></div><div><br>Mar 17 03:45:49 <a href="http://v-so-repo-01.company.com" target="_blank">v-so-repo-01.company.com</a> pulp[7257]: pulp.server.webservices.middleware.exception:INFO: Authentication with username admin:admin:5591d3ef988df07c2cb1c519 failed: preauthenticated remote user is missing.<br><br></div><div>Does anybody know what could be the problem?<br><br></div><div>Thank you,<br></div><div>Cristian Falcas<br><br></div></div></div></div></div> </blockquote></div><br></div>