[Freeipa-users] Client-Install failures

[Simo Sorce]

It is where mod_auth_gssapi drops the ccache file indeed.
But if it failed to do so you should have an authentication error in the logs.

Can you check if you see anything in the error log, perhaps rasing logging level to debug.

Simo.

----- Original Message -----
> From: "David Zabner" <david at cazena.com>
> To: "Simo Sorce" <simo at redhat.com>
> Cc: "Martin Kosek" <mkosek at redhat.com>, freeipa-users at redhat.com
> Sent: Thursday, January 28, 2016 10:18:06 AM
> Subject: Re: [Freeipa-users] Client-Install failures
> 
> Any guess as what it would be then?
> The location that is “missing a file” is specified by the gssapi config in
> /etc/httpd/conf.d/ipa.conf. So I assumed that this would be a mod_gssapi
> failure…
> 
> 
> Thanks for your help,
> David
> > On Jan 28, 2016, at 5:55 AM, Simo Sorce <simo at redhat.com> wrote:
> > 
> > Doesn't look related to mod_auth_gssapi, it's past it.
> > 
> > ----- Original Message -----
> >> From: "Martin Kosek" <mkosek at redhat.com>
> >> To: "David Zabner" <david at cazena.com>, freeipa-users at redhat.com, "Simo
> >> Sorce" <ssorce at redhat.com>
> >> Sent: Thursday, January 28, 2016 4:42:57 AM
> >> Subject: Re: [Freeipa-users] Client-Install failures
> >> 
> >> On 01/26/2016 10:20 PM, David Zabner wrote:
> >>> Hi All,
> >>> I am working on automated deployment of ipa clients through a program
> >>> called salt and have been seeing an issue.
> >>> Specifically, calls to ipa.server.internal/ipa/json occasionally return a
> >>> 500 error. This tends to occur while using ipa-client-install and ipa-dns
> >>> commands.
> >>> 
> >>> I am on free-ipa v 4.2.0 running on Centos 7 and will include the
> >>> offending
> >>> httpd error log.
> >>> Thanks for your help,
> >>> David
> >> 
> >> CCing Simo, I wonder if this error could be some problem caused by
> >> mod_auth_gssapi?
> >> 
> >> [Tue Jan 26 20:28:00.456181 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220] mod_wsgi (pid=9535): Exception occurred processing WSGI
> >> script '/usr/share/ipa/wsgi.py'.
> >> [Tue Jan 26 20:28:00.456211 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220] Traceback (most recent call last):
> >> [Tue Jan 26 20:28:00.456223 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]   File "/usr/share/ipa/wsgi.py", line 49, in
> >> application
> >> [Tue Jan 26 20:28:00.456245 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]     return api.Backend.wsgi_dispatch(environ,
> >> start_response)
> >> [Tue Jan 26 20:28:00.456251 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]   File
> >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 258, in
> >> __call__
> >> [Tue Jan 26 20:28:00.456263 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]     return self.route(environ, start_response)
> >> [Tue Jan 26 20:28:00.456268 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]   File
> >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 270, in
> >> route
> >> [Tue Jan 26 20:28:00.456276 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]     return app(environ, start_response)
> >> [Tue Jan 26 20:28:00.456281 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]   File
> >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 447, in
> >> __call__
> >> [Tue Jan 26 20:28:00.456288 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]     response = super(jsonserver,
> >> self).__call__(environ,
> >>          start_response)
> >> [Tue Jan 26 20:28:00.456293 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]   File
> >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 647, in
> >> __call__
> >> [Tue Jan 26 20:28:00.456299 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]     'xmlserver', user_ccache, environ, start_response,
> >> headers)
> >> [Tue Jan 26 20:28:00.456304 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]   File
> >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 593, in
> >> finalize_kerberos_acquisition
> >> [Tue Jan 26 20:28:00.456310 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]     session_data['ccache_data'] =
> >> load_ccache_data(ccache_name)
> >> [Tue Jan 26 20:28:00.456315 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]   File
> >> "/usr/lib/python2.7/site-packages/ipalib/session.py",
> >> line    1231, in load_ccache_data
> >> [Tue Jan 26 20:28:00.456330 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220]     src = open(name)
> >> [Tue Jan 26 20:28:00.456344 2016] [:error] [pid 9535] [remote
> >> 10.11.135.180:220] IOError: [Errno 2] No such file or directory:
> >> '/var/run/httpd/ipa/   clientcaches/admin at FOO.INTERNAL'
> >> 
> >> Martin
> >> 
> 
>