<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 11/26/2013 03:37 PM, siology.io wrote:
<blockquote
cite="mid:CAL8of0FWF6X9L0H_RHuhvE6kFUNzEKAuiw812WHWYfLddAD8DQ@mail.gmail.com"
type="cite">
<div dir="ltr">I'm seeing an issue with logging into the web UI of
ipa. I've been using IPA for 6 months or so in production, and
all has been well so far.
<div><br>
</div>
<div>The last thing i did in terms of IPA was run
ipa-dns-install, which completed successfully, but i suspect
this issue occured before that i never noticed as it's been a
few weeks since i used the UI. I typically check the login
page works and ldapsearch works after upgrades, but in this
instance the login box is presented, and after entering the
credentials it sits doing nothing for a while, then times out
with 'internal server error'</div>
<div><br>
</div>
<div>The only useful log i've managed to find is in
/var/log/httpd/error_log</div>
<div><br>
</div>
<div>
<div>[Wed Nov 27 08:41:47 2013] [error] [client (redacted)]
Script timed out before returning headers: wsgi.py, referer:
<a class="moz-txt-link-freetext" href="https://(redacted)/ipa/ui/">https://(redacted)/ipa/ui/</a></div>
</div>
</div>
</blockquote>
<br>
What happens before that in the log?<br>
Any DNS lookup or some other lookup?<br>
<br>
<blockquote
cite="mid:CAL8of0FWF6X9L0H_RHuhvE6kFUNzEKAuiw812WHWYfLddAD8DQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
</div>
<div><br>
</div>
<div>I'm seeing this behaviour on both my master and replica,
but they are both identical in terms of package versions and
such, so it may not be significant.</div>
<div><br>
</div>
<div>My system versions:</div>
<div>Centos 6.4 x64</div>
<div><br>
</div>
<div>
<div>ipa-python-3.0.0-26.el6_4.4.x86_64</div>
<div>ipa-server-selinux-3.0.0-26.el6_4.4.x86_64</div>
<div>python-iniparse-0.3.1-2.1.el6.noarch</div>
<div>libipa_hbac-1.9.2-82.10.el6_4.x86_64</div>
<div>libipa_hbac-python-1.9.2-82.10.el6_4.x86_64</div>
<div>ipa-client-3.0.0-26.el6_4.4.x86_64</div>
<div>ipa-server-3.0.0-26.el6_4.4.x86_64</div>
<div>ipa-pki-ca-theme-9.0.3-7.el6.noarch</div>
<div>ipa-admintools-3.0.0-26.el6_4.4.x86_64</div>
<div>ipa-pki-common-theme-9.0.3-7.el6.noarch</div>
</div>
<div><br>
</div>
<div>
<div>bind-dyndb-ldap-2.3-2.el6_4.1.x86_64<br>
</div>
<div>bind-9.8.2-0.17.rc1.el6_4.6.x86_64<br>
</div>
</div>
<div><br>
</div>
<div>which are (afaik) all latest for centos 6.4</div>
<div><br>
</div>
<div>Oddly, i'm not seeing this behaviour in my virtualbox /
vagrant IPA testbed, which has identical version numbers, and
wsgi.py in /usr/share/ipa has identical md5sum.</div>
<div><br>
</div>
<div>Not really sure how to approach debugging this further. Any
ideas ? Has anyone else seen this happen ?</div>
<div><br>
</div>
<div>The ldapsearch, bind dns and everything else seem
operational - just the GUI is out of action.</div>
</div>
</blockquote>
<br>
<br>
<br>
<blockquote
cite="mid:CAL8of0FWF6X9L0H_RHuhvE6kFUNzEKAuiw812WHWYfLddAD8DQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>