HI,<div><br></div><div>So is the failure of the client an issue, as in I need to run it again?.</div><div><br></div><div>I still cant get the local firefox to authenticate.</div><div><br></div><div>Regards</div><div>Nige<br>
<br><div class="gmail_quote">On Thu, Jan 19, 2012 at 2:34 PM, Nigel Sollars <span dir="ltr"><<a href="mailto:nsollars@gmail.com">nsollars@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br><br><div class="gmail_quote"><div class="im">On Thu, Jan 19, 2012 at 2:28 PM, Rob Crittenden <span dir="ltr"><<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>Nigel Sollars wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi all,<br>
<br>
After fixing upa number of things and successfully installing / testing<br>
the server install, I have a small issue with the UI inside firefox in<br>
that after importing the CA and looking at a few guides I notice these<br>
line in my http error logs:<br>
</blockquote>
<br></div>
What things did you fix up?</blockquote><div><br></div><div><br></div></div><div>Just permissions on /dev/shm and /var/tmp</div><div class="im"><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
[Thu Jan 19 13:17:56 2012] [error] [client x.x.x.x] File does not exist:<br>
/usr/share/ipa/ui/develop.js, referer:<br>
<a href="https://ipaserver.jitscaleus.net/ipa/ui/" target="_blank">https://ipaserver.jitscaleus.<u></u>net/ipa/ui/</a><br>
[Thu Jan 19 13:19:41 2012] [error] [client x.x.x.x] File does not exist:<br>
/usr/share/ipa/ui/develop.js, referer:<br>
<a href="https://ipaserver.jitscaleus.net/ipa/ui/" target="_blank">https://ipaserver.jitscaleus.<u></u>net/ipa/ui/</a><br>
[Thu Jan 19 13:19:59 2012] [error] [client x.x.x.x] File does not exist:<br>
/usr/share/ipa/ui/develop.js, referer:<br>
<a href="https://ipaserver.jitscaleus.net/ipa/ui/" target="_blank">https://ipaserver.jitscaleus.<u></u>net/ipa/ui/</a><br>
[Thu Jan 19 13:27:58 2012] [error] [client x.x.3.x] File does not exist:<br>
/usr/share/ipa/ui/develop.js, referer:<br>
<a href="https://ipaserver.jitscaleus.net/ipa/ui/" target="_blank">https://ipaserver.jitscaleus.<u></u>net/ipa/ui/</a><br>
[Thu Jan 19 13:31:34 2012] [error] [client x.x.x.x] File does not exist:<br>
/usr/share/ipa/ui/develop.js, referer:<br>
<a href="https://ipaserver.jitscaleus.net/ipa/ui/" target="_blank">https://ipaserver.jitscaleus.<u></u>net/ipa/ui/</a><br>
</blockquote>
<br></div>
I think this can be ignored, I believe the code is just used for testing/developing (and isn't used at all in newer builds).<div><br>
<br></div></blockquote><div><br></div><div><br></div></div><div>Ok cool</div><div class="im"><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I ran through the trouble shooting guide with re-running kinit ( passing<br>
password ) then running, ldapsearch -Y GSSAPI -b "dc=domain,dc=com"<br>
uid=admin, which returned the correct response,<br>
<br>
The browser loops around the configuration from the server to return to<br>
the webui with the error of an invalid ticket.<br>
</blockquote>
<br></div>
Did you configure the browser to do negotiate authentication (or use the configure firefox button)?<div><br>
<br></div></blockquote><div><br></div></div><div>Via the button, the CA is there about:config shows the correct network options there also.</div><div class="im"><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I am not 100% if this is relevant or not but the client install that was<br>
called after the ser install finalized, bombed completely with the folowing:<br>
<br>
Traceback (most recent call last):<br>
File "/usr/sbin/ipa-client-install"<u></u>, line 1292, in <module><br>
sys.exit(main())<br>
File "/usr/sbin/ipa-client-install"<u></u>, line 1279, in main<br>
rval = install(options, env, fstore, statestore)<br>
File "/usr/sbin/ipa-client-install"<u></u>, line 1117, in install<br>
fstore.backup_file("/etc/sssd/<u></u>sssd.conf")<br>
File "/usr/lib/python2.6/site-<u></u>packages/ipapython/sysrestore.<u></u>py", line<br>
126, in backup_file<br>
shutil.copy2(path, backup_path)<br>
File "/usr/lib64/python2.6/shutil.<u></u>py", line 95, in copy2<br>
copyfile(src, dst)<br>
File "/usr/lib64/python2.6/shutil.<u></u>py", line 51, in copyfile<br>
with open(dst, 'wb') as fdst:<br>
IOError: [Errno 2] No such file or directory:<br>
'/var/lib/ipa-client/<u></u>sysrestore/107a99f6a6514e30-<u></u>sssd.conf'<br>
</blockquote>
<br></div>
Strange. Does /var/lib/ipa-client/sysrestore exist?<span><font color="#888888"><br>
<br></font></span></blockquote><div><br></div></div><div>No that one is not there</div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span><font color="#888888">
rob<br>
</font></span></blockquote></div><div class="HOEnZb"><div class="h5"><br><br clear="all"><div><br></div>-- <br><font>“Science is a differential equation. Religion is a boundary condition.”<br> Alan Turing<br>
</font><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><font>“Science is a differential equation. Religion is a boundary condition.”<br> Alan Turing<br>
</font><br>
</div>