[Freeipa-users] ipa client install problem

JoachimBadzong badzong at wizard.franken.de
Mon Jun 27 17:20:47 UTC 2011


Hi,

ok, your advice to take a look into the /var/log/httpd/error_log was
good as far as i found here more information.
On the other side i have to admit that these errors doesn't tell me
really anything about what i could do.
So i post the messages here and hope that somebody has further ideas :-)

So from error_log when i try to make ipa-client-install:

[Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: non-public:
AttributeError: 'thread._local' object has no attribute 'principal'
[Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last):
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 218, in
wsgi_execute
[Mon Jun 27 19:13:57 2011] [error]     result =
self.Command[name](*args, **options)
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 421, in
__call__
[Mon Jun 27 19:13:57 2011] [error]     ret = self.run(*args, **options)
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 727, in run
[Mon Jun 27 19:13:57 2011] [error]     return self.execute(*args,
**options)
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipaserver/plugins/join.py", line 105,
in execute
[Mon Jun 27 19:13:57 2011] [error]     allowed = ldap.can_write(dn,
'krblastpwdchange')
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f
[Mon Jun 27 19:13:57 2011] [error]     return f(*new_args, **kwargs)
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 705,
in can_write
[Mon Jun 27 19:13:57 2011] [error]     (dn, attrs) =
self.get_effective_rights(dn, [attr])
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f
[Mon Jun 27 19:13:57 2011] [error]     return f(*new_args, **kwargs)
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 691,
in get_effective_rights
[Mon Jun 27 19:13:57 2011] [error]     principal = getattr(context,
'principal')
[Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local'
object has no attribute 'principal'
[Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: xmlserver.__call__():
[Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last):
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 246, in
__call__
[Mon Jun 27 19:13:57 2011] [error]     response =
self.wsgi_execute(environ)
[Mon Jun 27 19:13:57 2011] [error]   File
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 230, in
wsgi_execute
[Mon Jun 27 19:13:57 2011] [error]     self.info('%s: %s(%s): %s',
context.principal, name, ',
'.join(self.Command[name]._repr_iter(**params)), e.__class__.__name__)
[Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local'
object has no attribute 'principal'

Thanks


Am Montag, den 27.06.2011, 12:41 -0400 schrieb Uzor Ide:
> If it is new install you can run the install command with a --debug
> switch to see what it would report. You can also take look
> at /var/log/httpd/error_log and access_log on the server.
> 
> I had simillar issue but the server was an upgrade. 
> I found out though, that the error is very generic. 
> 
> The fix in my case, was a re-install of some packages on the server.
> 
> __Ide
> 
> On Mon, Jun 27, 2011 at 12:01 PM, JoachimBadzong
> <badzong at wizard.franken.de> wrote:
>         Hi,
>         
>         have just checked that folder on server side:
>         -rw-r--r-- 1 root root  1209  6. Mai 16:50 browserconfig.html
>         -rw-r--r-- 1 root root 15076  6. Mai 16:50 ipa_error.css
>         -rw-r--r-- 1 root root  2954  6. Mai 16:50 ssbrowser.html
>         -rw-r--r-- 1 root root  1502  6. Mai 16:50 unauthorized.html
>         
>         Is there anything missing ?
>         Its an new install on naked new installed fc15 box.
>         
>         Thanks
>         
>         Am Montag, den 27.06.2011, 09:08 -0400 schrieb Uzor Ide:
>         
>         > Your server is missing some files.
>         > Check and make sure that you have some files in
>         the /etc/ipa/html
>         > directory
>         >
>         > This usually occurs when you do an in-place upgrade of the
>         fedora box
>         > containing freeipa-server
>         >
>         >
>         > __Ide
>         >
>         > On Sun, Jun 26, 2011 at 1:00 PM, JoachimBadzong
>         > <badzong at wizard.franken.de> wrote:
>         >         Hi,
>         >
>         >         i have setup an freeipa server ( 2.0.1-2 ) with FC15
>         and have
>         >         now tried
>         >         to install the ipa client on client machine.
>         >         When i start the ipa-client-install ( 2.0.1-2 ) it
>         detects
>         >         everyting as
>         >         it should be. I can enter admin prinicipal and the
>         passowrd,
>         >         but then i
>         >         get the following error message :
>         >
>         >          Joining realm failed because of failing XML-RPC
>         request.
>         >          This error may be caused by incompatible
>         server/client major
>         >         versions.
>         >
>         >         As both rpms ( server and client ) have the same
>         version i
>         >         just dont
>         >         understand the message.
>         >
>         >         Whats wrong ?
>         >         Where can i look to find more information to solve
>         that ?
>         >
>         >         Thanks for any hint.
>         >         J
>         >
>         >
>         >         _______________________________________________
>         >         Freeipa-users mailing list
>         >         Freeipa-users at redhat.com
>         >
>         https://www.redhat.com/mailman/listinfo/freeipa-users
>         >
>         
>         
>         
> 





More information about the Freeipa-users mailing list