[Freeipa-users] Services missing in web-ui

[Pavel Vomacka]

Hello,

it is caused by missing canonical name on services which were created in 
older versions of FreeIPA. Fixed ticket here: 
https://fedorahosted.org/freeipa/ticket/6397 .

On 12/07/2016 11:48 AM, Fujisan wrote:
> And with Firefox 50.0.2.
>
> F.
>
> On Wed, Dec 7, 2016 at 11:46 AM, Fujisan <fujisan43 at gmail.com 
> <mailto:fujisan43 at gmail.com>> wrote:
>
>     I have the same issue with version 4.4.2
>
>     $ rpm -qa|grep freeipa
>     freeipa-server-4.4.2-1.fc25.x86_64
>     freeipa-python-compat-4.4.2-1.fc25.noarch
>     freeipa-server-common-4.4.2-1.fc25.noarch
>     freeipa-common-4.4.2-1.fc25.no
>     <http://freeipa-common-4.4.2-1.fc25.no>arch
>     freeipa-server-trust-ad-4.4.2-1.fc25.x86_64
>     freeipa-client-4.4.2-1.fc25.x86_64
>     freeipa-client-common-4.4.2-1.fc25.noarch
>
>
>     ​F.​
>
>
>     On Wed, Dec 7, 2016 at 11:13 AM, Troels Hansen <th at casalogic.dk
>     <mailto:th at casalogic.dk>> wrote:
>
>         I have a strange issue in IPA 4.4.0-12 (RHEL 7.3)
>
>
>         Navigating to Identity -> Services reveals 5 services. 2 cifs,
>         2 dogtag and one empty line...
>
>         cifs/host1.domain at REALM
>         cifs/host2.domain at REALM
>         dogtag/ipa01.domain at REALM
>         dogtag/ipa02.domain at REALM
>
>
>
>         However, from CLI everything looks OK:
>
>         # ipa service-find
>         -------------------
>         11 services matched
>         -------------------
>         Principal name: ldap/ipa02.domain at REALM
>         Principal alias: ldap/ipa02.domain at REALM
>         Certificate: .......
>         .......
>
>
>         Keytab: True
>
>         Principal name: ldap/ipa01.domain at REALM
>         Principal alias: ldap/ipa01.domain at REALM
>         Certificate: .......
>         .......
>
>
>         Keytab: True
>
>         Principal name: HTTP/ipa02.domain at REALM
>         Principal alias: HTTP/ipa02.domain at REALM
>         Certificate: ........
>         .......
>
>
>
>         Keytab: True
>
>         Principal name: cifs/rhellxudv01.domain at REALM
>         Principal alias: cifs/rhellxudv01.domain at REALM
>         Keytab: True
>
>
>
>         Principal name: cifs/ipa02.domain at REALM
>         Principal alias: cifs/ipa02.domain at REALM
>         Keytab: True
>
>
>
>         Principal name: nfs/profil01.domain at REALM
>         Principal alias: nfs/profil01.domain at REALM
>         Keytab: True
>
>
>
>         Principal name: cifs/ipa01.domain at REALM
>         Principal alias: cifs/ipa01.domain at REALM
>         Keytab: True
>
>         Principal name: dogtag/ipa02.domain at REALM
>         Principal alias: dogtag/ipa02.domain at REALM
>         Keytab: True
>
>
>
>         Principal name: dogtag/ipa01.domain at REALM
>         Principal alias: dogtag/ipa01.domain at REALM
>         Keytab: True
>
>
>
>         Principal name: cifs/rhellxudv02.domain at REALM
>         Principal alias: cifs/rhellxudv02.domain at REALM
>         Keytab: True
>
>
>
>         Principal name: HTTP/ipa01.domain at REALM
>         Principal alias: HTTP/ipa01.domain at REALM
>         Certificate: ..............
>         ..............
>         Keytab: True
>
>
>
>         -----------------------------
>         Number of entries returned 11
>         -----------------------------
>
>
>
>
>         (some lines truncated.....)
>
>
>         soooo... somsthing must be disrupting the view in web-ui,
>
>
>         Tried in Chrome 43 and IE 11
>
>
>         Looking at what gets requested by the browser at
>         /ipa/session/json I can see in the json that it gets the
>         correct content:
>
>
>         result: {count: 11, result: [,…], summary: "11 services
>         matched", truncated: false}
>         count: 11
>         result: [,…]
>         0: {dn:
>         "krbprincipalname=cifs/rhellxudv01.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         1: {dn:
>         "krbprincipalname=dogtag/ipa01.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         2: {dn:
>         "krbprincipalname=nfs/profil01.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         3: {dn:
>         "krbprincipalname=cifs/rhellxudv02.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         4: {dn:
>         "krbprincipalname=dogtag/ipa02.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         5: {dn:
>         "krbprincipalname=HTTP/ipa01.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         6: {dn:
>         "krbprincipalname=cifs/ipa02.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         7: {dn:
>         "krbprincipalname=cifs/ipa01.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         8: {dn:
>         "krbprincipalname=ldap/ipa01.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         9: {dn:
>         "krbprincipalname=HTTP/ipa02.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         10: {dn:
>         "krbprincipalname=ldap/ipa02.domain at REALM,cn=services,cn=accounts,dc=domain",…}
>         summary: "11 services matched"
>         truncated: false
>
>
>
>         So this is obviously only a web-ui problem, but I can't see
>         what causes the problem?
>
>
>         --
>         Manage your subscription for the Freeipa-users mailing list:
>         https://www.redhat.com/mailman/listinfo/freeipa-users
>         <https://www.redhat.com/mailman/listinfo/freeipa-users>
>         Go to http://freeipa.org for more info on the project
>
>
>
>
>

-- 
Pavel^3 Vomacka

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20161207/2e8dac44/attachment.htm>