[Freeipa-users] sudden ipa errors.

[Dmitri Pal]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/18/2012 04:37 PM, Nathan Lager wrote:
> [Tue Sep 18 16:27:06 2012] [debug] src/mod_auth_kerb.c(1597): [client
> 139.147.7.204] Done obtaining credentials for s4u2proxy, referer:
> https://caroline0.lafayette.edu/ipa/xml
> [Tue Sep 18 16:27:08 2012] [debug] src/mod_auth_kerb.c(1138): [client
> 139.147.7.204] GSS-API major_status:000d0000, minor_status:00000000,
> referer: https://caroline0.lafayette.edu/ipa/xml
> [Tue Sep 18 16:27:08 2012] [error] [client 139.147.7.204]
> gss_acquire_cred() failed: Unspecified GSS failure. Minor code may
> provide more information (, Unknown error), referer:
> https://caroline0.lafayette.edu/ipa/xml
> [Tue Sep 18 16:27:08 2012] [info] [client 139.147.7.204] (32)Broken
> pipe: core_output_filter: writing data to the network
> [Tue Sep 18 16:27:08 2012] [info] Connection to child 1 closed (server
> caroline0.lafayette.edu:443, client 139.147.7.204)
This is probably most significant part.
It gets creds for s4u2proxy and then dies getting the what? The cred for
ldap?
Rob is there any log that would be worth looking at this situation?
There should be a keytab for ldap principal. Do we know if it is OK?

- -- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


- -------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJQWbipAAoJEKRjuMOPSn1YlNUH/3ROJcCL1kQR+Mh7hYnTETPV
SEaKJOZOM9MH4h5TbcyGcpnBYDQhg5CphATdlW2VONZCiAy9wKIS9lbVAYz2zUn9
Zc4ovwM5JHijqEgPcStV2dXbnI/5+FaCpIncv3rLrQ1zpokWdqwJBUxpXVOOlMyU
hHttu4lWbHjSsWdntwi8Nf66UkN0fEFL+JfHI+hkQ+86LPFxzY0IFkren6dvSk7J
a3Wlgxw9bDaHH8HMJCmrPcLMyCqaOKDOGcIekBbEk2XoKnin5cxh0W3IsvrY6L66
900rV5isA2j0EbCFEvY/iG8ydmhacVQA8+GX00Pf2ApUhFJ+cyYg5UOocvjA81A=
=4uGm
-----END PGP SIGNATURE-----