[Freeipa-users] freeipa - f12 - web gui logon issues

[Rob Crittenden]

Tom Brown wrote:
> Hi
> 
> I have seemingly followed the howto on getting this running and i have 
> made the changes required as noted in about:config but i do not seem to 
> be able to get to the GUI admin screen. No matter what i seem to do all 
> i am presented with is 'Kerberos Authentication Failed'
> 
> Any clues as to what causes this or where to look for logs as i cant see 
> anything obvious anywhere

Not sure which howto you referred to but this covers it pretty well
http://freeipa.org/docs/1.2/Client_Setup_Guide/en-US/html/chap-Client_Configuration_Guide-Configuring_Your_Browser.html

For troubleshooting the client side see 
http://freeipa.org/docs/1.2/Installation_Deployment_Guide/en-US/html/sect-Installation_and_Deployment_Guide-Setting_up_the_IPA_Server-Configuring_Your_Browser.html#sect-Installation_and_Deployment_Guide-Configuring_Your_Browser-Troubleshooting

The logs to look at are:

/var/log/httpd/error_log (you'll probably want to set LogLevel debug in 
/etc/httpd/conf/httpd.conf and restart the httpd service first).

The KDC log might be interesting, /var/log/krb5kdc.log

I assume that you have a kerberos ticket? Sometimes quiting Firefox, 
doing a kdestroy, kinit, restart Firefox helps.

rob