[Freeipa-users] Re: Can't find ipa-user
Rob Crittenden
rcritten at redhat.com
Thu Nov 5 14:31:31 UTC 2009
Jesster Leight wrote:
> Ok i solve this problem. I configured config file
> /etc/http/conf.d/ipa.conf as writing in manuals.
> After reboot httpd service I see admin user and WEB.
> But I have one problem! Web interface is not work! IN Firefox i see
> Browser Kerberos Setup and i complete all steps sucessfully, but nothing
> results =\ I refreshing browser and same error.
I would recommend quitting the browser, running kdestroy, kinit, then
relaunching the browser and trying again.
> In Internet Explorer on WindowsXP i enter login and password
> admin:12345678 (as kinit admin) and see only blank screen, but in
> address bar i can see https://ipa.example.com/ipa/ui.
> In what can be problem ?
So you modified the Apache server to set KrbMethodK5Passwd on?
You'll need to check the Apache and IPA UI logs for more details.
/var/log/httpd/error_log and /var/log/ipa_error.log
rob
>
> 2009/11/4 Jesster Leight <theiosx at gmail.com <mailto:theiosx at gmail.com>>
>
> I installed FreeIPA with manual Implementing FreeIPA in a mixed
> Environment.
> My IPA OS: Fedora 11 Leonidas (Default without update. Clean OS, new
> installation)
> All steps compled sucessfully, except one:
>
> [root at ipa ~]# kinit admin
> Password for admin at EXAMPLE.COM <mailto:admin at EXAMPLE.COM>: 12345678
>
> [root at ipa ~]# klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: admin at EXAMPLE.COM <mailto:admin at EXAMPLE.COM>
> Valid starting Expires Service principal
> 11/04/09 17:36:08 11/05/09 17:36:05 krbtgt/EXAMPLE.COM
> <http://EXAMPLE.COM>@EXAMPLE.COM <http://EXAMPLE.COM>
> Kerberos 4 ticket cache: /tmp/tkt0
> klist: You have no tickets cached
>
> And ...
>
> [root at ipa ~]# ipa-finduser admin
> _ssl.c:480: EOF occurred in violation of protocol
> Re-run with -v flag for more details.
>
> [root at ipa ~]# ipa-finduser -v admin
> Connecting to IPA server: https://ipa.example.com/ipa/xml
> _ssl.c:480: EOF occurred in violation of protocol
> Re-run with -v flag for more details.
>
> In what can be problem ?
>
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20091105/2e8084a6/attachment.bin>
More information about the Freeipa-users
mailing list