<div dir="ltr">HI thanks<div> </div><div>sure this is the only place i can ask questions :)</div><div> </div><div>but i don't know from where i am getting that basic authentication window like .htaccess based. i think when i tried from chome only i got this window</div><div> </div><div> </div></div><div class="gmail_extra"> <div class="gmail_quote">On Mon, Mar 9, 2015 at 2:21 PM, Martin Kosek <<a href="mailto:mkosek@redhat.com" target="_blank">mkosek@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Ok, thanks for information. I would still love to know the real root cause, but we will now find it now I assume. Of this issue re-appears, let us know :-) Thanks, Martin <div class="HOEnZb"><div class="h5"> On 03/09/2015 09:10 AM, Ben .T.George wrote: > Hi Martin, > > thanks for your replay. > > yesterday i did lot of this to fix this issue. > > the issue has been solved by kdestroy and re-initiate the ticket. > > after that restarted ipa service, it got worked > > Regards, > ben > > On Mon, Mar 9, 2015 at 10:57 AM, Martin Kosek <<a href="mailto:mkosek@redhat.com">mkosek@redhat.com</a>> wrote: > >> Thanks for all the data. So it looks like your browser properly forward the >> session cookie, but it is not recognized on the server even though it was >> stored before. >> >> Especially these lines are strange: >> >> [Sun Mar 08 13:16:29.<a href="tel:909637%202015" value="+919096372015">909637 2015</a>] [:error] [pid 3004] ipa: DEBUG: store >> session: session_id=4803e184cecb42f2e326391dbb09443d >> start_timestamp=2015-03-08T13:15:12 access_timestamp=2015-03-08T13:16:29 >> expiration_timestamp=2015-03-08T13:36:29 >> ... >> [Sun Mar 08 13:16:29.921519 2015] [:error] [pid 3003] ipa: DEBUG: found >> session cookie_id = 4803e184cecb42f2e326391dbb09443d >> [Sun Mar 08 13:16:29.921731 2015] [:error] [pid 3003] ipa: DEBUG: no >> session data in cache with id=4803e184cecb42f2e326391dbb09443d, generating >> empty session data >> >> We know that ipa_memcached is running. Can you please also check if there >> are >> no SELinux errors in /var/log/audit/audit.log preveting Apache from >> looking up >> the session data? >> >> Thanks, >> Martin >> >> On 03/08/2015 11:44 AM, Ben .T.George wrote: >>> i was inspecting the page and got below response. >>> >>> <a href="http://s21.postimg.org/itv5hf0h3/asdasd.jpg" target="_blank">http://s21.postimg.org/itv5hf0h3/asdasd.jpg</a> >>> >>> <a href="http://s3.postimg.org/f6knomt1f/Capture.jpg" target="_blank">http://s3.postimg.org/f6knomt1f/Capture.jpg</a> >>> >>> please anyone help me to solve this issue. i just want to create one >> local >>> user in IPA >>> >>> On Sun, Mar 8, 2015 at 1:17 PM, Ben .T.George <<a href="mailto:bentech4you@gmail.com">bentech4you@gmail.com</a>> >> wrote: >>> >>>> I enabled debugging mode on default.conf and this is what i am getting >> on >>>> error_log >>>> >>>> [Sun Mar 08 13:16:18.<a href="tel:204363%202015" value="+912043632015">204363 2015</a>] [auth_kerb:error] [pid 3065] [client >>>> <a href="http://172.16.107.250:60088" target="_blank">172.16.107.250:60088</a>] gss_accept_sec_context() failed: An unsupported >>>> mechanism was requested (, Unknown error), referer: >>>> <a href="https://kwtpocpbis01.solaris.local/ipa/ui/" target="_blank">https://kwtpocpbis01.solaris.local/ipa/ui/</a> >>>> [Sun Mar 08 13:16:29.<a href="tel:849339%202015" value="+918493392015">849339 2015</a>] [:error] [pid 3004] ipa: DEBUG: WSGI >>>> wsgi_dispatch.__call__: >>>> [Sun Mar 08 13:16:29.849458 2015] [:error] [pid 3004] ipa: DEBUG: WSGI >>>> login_password.__call__: >>>> [Sun Mar 08 13:16:29.849683 2015] [:error] [pid 3004] ipa: DEBUG: >>>> Obtaining armor ccache: >>>> principal=HTTP/kwtpocpbis01.solaris.local@SOLARIS.LOCAL >>>> keytab=/etc/httpd/conf/ipa.keytab >>>> ccache=/var/run/ipa_memcached/krbcc_A_admin >>>> [Sun Mar 08 13:16:29.<a href="tel:849830%202015" value="+918498302015">849830 2015</a>] [:error] [pid 3004] ipa: DEBUG: >> Starting >>>> external process >>>> [Sun Mar 08 13:16:29.849923 2015] [:error] [pid 3004] ipa: DEBUG: >>>> args='/usr/bin/kinit' '-kt' '/etc/httpd/conf/ipa.keytab' >>>> 'HTTP/kwtpocpbis01.solaris.local@SOLARIS.LOCAL' >>>> [Sun Mar 08 13:16:29.<a href="tel:868747%202015" value="+918687472015">868747 2015</a>] [:error] [pid 3004] ipa: DEBUG: >> Process >>>> finished, return code=0 >>>> [Sun Mar 08 13:16:29.868858 2015] [:error] [pid 3004] ipa: DEBUG: >> stdout= >>>> [Sun Mar 08 13:16:29.868955 2015] [:error] [pid 3004] ipa: DEBUG: >> stderr= >>>> [Sun Mar 08 13:16:29.869120 2015] [:error] [pid 3004] ipa: DEBUG: >> Starting >>>> external process >>>> [Sun Mar 08 13:16:29.869204 2015] [:error] [pid 3004] ipa: DEBUG: >>>> args='/usr/bin/kinit' 'admin@SOLARIS.LOCAL' '-T' >>>> '/var/run/ipa_memcached/krbcc_A_admin' >>>> [Sun Mar 08 13:16:29.<a href="tel:902181%202015" value="+919021812015">902181 2015</a>] [:error] [pid 3004] ipa: DEBUG: >> Process >>>> finished, return code=0 >>>> [Sun Mar 08 13:16:29.902269 2015] [:error] [pid 3004] ipa: DEBUG: >>>> stdout=Password for admin@SOLARIS.LOCAL: >>>> [Sun Mar 08 13:16:29.<a href="tel:902278%202015" value="+919022782015">902278 2015</a>] [:error] [pid 3004] >>>> [Sun Mar 08 13:16:29.902328 2015] [:error] [pid 3004] ipa: DEBUG: >> stderr= >>>> [Sun Mar 08 13:16:29.902427 2015] [:error] [pid 3004] ipa: DEBUG: kinit: >>>> principal=admin@SOLARIS.LOCAL returncode=0, stderr="" >>>> [Sun Mar 08 13:16:29.<a href="tel:902483%202015" value="+919024832015">902483 2015</a>] [:error] [pid 3004] ipa: DEBUG: >> Cleanup >>>> the armor ccache >>>> [Sun Mar 08 13:16:29.902560 2015] [:error] [pid 3004] ipa: DEBUG: >> Starting >>>> external process >>>> [Sun Mar 08 13:16:29.902621 2015] [:error] [pid 3004] ipa: DEBUG: >>>> args='/usr/bin/kdestroy' '-A' '-c' >> '/var/run/ipa_memcached/krbcc_A_admin' >>>> [Sun Mar 08 13:16:29.908045 2015] [:error] [pid 3004] ipa: DEBUG: >> Process >>>> finished, return code=0 >>>> [Sun Mar 08 13:16:29.908121 2015] [:error] [pid 3004] ipa: DEBUG: >> stdout= >>>> [Sun Mar 08 13:16:29.908173 2015] [:error] [pid 3004] ipa: DEBUG: >> stderr= >>>> [Sun Mar 08 13:16:29.908348 2015] [:error] [pid 3004] ipa: DEBUG: found >>>> session cookie_id = 4803e184cecb42f2e326391dbb09443d >>>> [Sun Mar 08 13:16:29.908647 2015] [:error] [pid 3004] ipa: DEBUG: found >>>> session data in cache with id=4803e184cecb42f2e326391dbb09443d >>>> [Sun Mar 08 13:16:29.908728 2015] [:error] [pid 3004] ipa: DEBUG: >>>> finalize_kerberos_acquisition: login_password >>>> ccache_name="FILE:/var/run/ipa_memcached/krbcc_3004" >>>> session_id="4803e184cecb42f2e326391dbb09443d" >>>> [Sun Mar 08 13:16:29.908824 2015] [:error] [pid 3004] ipa: DEBUG: >> reading >>>> ccache data from file "/var/run/ipa_memcached/krbcc_3004" >>>> [Sun Mar 08 13:16:29.909319 2015] [:error] [pid 3004] ipa: DEBUG: >>>> get_credential_times: principal=krbtgt/SOLARIS.LOCAL@SOLARIS.LOCAL, >>>> authtime=03/08/15 13:16:29, starttime=03/08/15 13:16:29, >> endtime=03/09/15 >>>> 13:16:29, renew_till=01/01/70 03:00:00 >>>> [Sun Mar 08 13:16:29.909415 2015] [:error] [pid 3004] ipa: DEBUG: >>>> KRB5_CCache FILE:/var/run/ipa_memcached/krbcc_3004 endtime=1425896189 >>>> (03/09/15 13:16:29) >>>> [Sun Mar 08 13:16:29.909538 2015] [:error] [pid 3004] ipa: DEBUG: >>>> set_session_expiration_time: duration_type=inactivity_timeout >> duration=1200 >>>> max_age=1425895889 expiration=1425810989.91 (2015-03-08T13:36:29) >>>> [Sun Mar 08 13:16:29.909637 2015] [:error] [pid 3004] ipa: DEBUG: store >>>> session: session_id=4803e184cecb42f2e326391dbb09443d >>>> start_timestamp=2015-03-08T13:15:12 access_timestamp=2015-03-08T13:16:29 >>>> expiration_timestamp=2015-03-08T13:36:29 >>>> [Sun Mar 08 13:16:29.910004 2015] [:error] [pid 3004] ipa: DEBUG: >>>> release_ipa_ccache: KRB5CCNAME environment variable not set >>>> [Sun Mar 08 13:16:29.921259 2015] [:error] [pid 3003] ipa: DEBUG: WSGI >>>> wsgi_dispatch.__call__: >>>> [Sun Mar 08 13:16:29.921351 2015] [:error] [pid 3003] ipa: DEBUG: WSGI >>>> jsonserver_session.__call__: >>>> [Sun Mar 08 13:16:29.921519 2015] [:error] [pid 3003] ipa: DEBUG: found >>>> session cookie_id = 4803e184cecb42f2e326391dbb09443d >>>> [Sun Mar 08 13:16:29.921731 2015] [:error] [pid 3003] ipa: DEBUG: no >>>> session data in cache with id=4803e184cecb42f2e326391dbb09443d, >> generating >>>> empty session data >>>> [Sun Mar 08 13:16:29.921875 2015] [:error] [pid 3003] ipa: DEBUG: store >>>> session: session_id=4803e184cecb42f2e326391dbb09443d >>>> start_timestamp=2015-03-08T13:16:29 access_timestamp=2015-03-08T13:16:29 >>>> expiration_timestamp=1970-01-01T03:00:00 >>>> [Sun Mar 08 13:16:29.922125 2015] [:error] [pid 3003] ipa: DEBUG: >>>> jsonserver_session.__call__: session_id=4803e184cecb42f2e326391dbb09443d >>>> start_timestamp=2015-03-08T13:16:29 access_timestamp=2015-03-08T13:16:29 >>>> expiration_timestamp=1970-01-01T03:00:00 >>>> [Sun Mar 08 13:16:29.922191 2015] [:error] [pid 3003] ipa: DEBUG: no >>>> ccache, need login >>>> [Sun Mar 08 13:16:29.922265 2015] [:error] [pid 3003] ipa: DEBUG: >>>> jsonserver_session: 401 Unauthorized need login >>>> >>>> >>>> On Sun, Mar 8, 2015 at 1:02 PM, Ben .T.George <<a href="mailto:bentech4you@gmail.com">bentech4you@gmail.com</a>> >>>> wrote: >>>> >>>>> this is the error mesage i am getting on httpd/error_log >>>>> >>>>> [Sun Mar 08 13:02:02.<a href="tel:965470%202015" value="+919654702015">965470 2015</a>] [auth_kerb:error] [pid 2922] [client >>>>> 172.16.107 >>>>> .250:60005] >>>>> gss_accept_sec_context() failed: An unsupported mechanism was request >>>>> >>>>> ed (, Unknown error), referer: >>>>> <a href="https://kwtpocpbis01.solaris.local/ipa/ui/" target="_blank">https://kwtpocpbis01.solaris.local/ipa/ui/</a> >>>>> >>>>> On Sun, Mar 8, 2015 at 12:48 PM, Ben .T.George <<a href="mailto:bentech4you@gmail.com">bentech4you@gmail.com</a>> >>>>> wrote: >>>>> >>>>>> Hi i checked the services and below is my output >>>>>> >>>>>> [root@kwtpocpbis01 ipa_memcached]# ps -ef | grep ipa_memcached >>>>>> apache 2079 1 0 11:11 ? 00:00:00 /usr/bin/memcached -d >> -s >>>>>> /var/run/ipa_memcached/ipa_memcached -u apache -m 64 -c 1024 -P >>>>>> /var/run/ipa_memcached/ipa_memcached.pid >>>>>> root 2801 2504 0 12:48 pts/0 00:00:00 grep --color=auto >>>>>> ipa_memcached >>>>>> >>>>>> [root@kwtpocpbis01 ipa_memcached]# ipactl status >>>>>> Directory Service: RUNNING >>>>>> krb5kdc Service: RUNNING >>>>>> kadmin Service: RUNNING >>>>>> named Service: RUNNING >>>>>> ipa_memcached Service: RUNNING >>>>>> httpd Service: RUNNING >>>>>> pki-tomcatd Service: RUNNING >>>>>> smb Service: RUNNING >>>>>> winbind Service: RUNNING >>>>>> ipa-otpd Service: RUNNING >>>>>> ipa-dnskeysyncd Service: RUNNING >>>>>> ipa: INFO: The ipactl command was successful >>>>>> >>>>>> >>>>>> On Sun, Mar 8, 2015 at 10:54 AM, Ben .T.George <<a href="mailto:bentech4you@gmail.com">bentech4you@gmail.com</a> >>> >>>>>> wrote: >>>>>> >>>>>>> HI >>>>>>> >>>>>>> i have free IPA 4.1.2 installed. >>>>>>> >>>>>>> my web ui always giving "Your session has expired. Please re-login." >>>>>>> even i tried from different computer.different browsers.. >>>>>>> >>>>>>> how can i fix this.? >>>>>>> >>>>>> >>>>>> >>>>> >>>> >>> >>> >>> >> >> > </div></div></blockquote></div> </div>