Steven Wagner wrote: > Hi list! > > I'm looking at overhauling an existing PXE-based provisioning system for > a blend of older Fedora servers and some > CentOS development machines. I installed cobbler from the 1.2.8 source > RPM a couple days ago and I'm having some > trouble getting the web UI to authenticate to cobblerd. I can > authenticate as far as Apache is concerned, but > as soon as I click on a link in the UI that requires an XMLRPC call, I > get an exception that turns out to be > "403: Forbidden." >
(1) Where did you get the source RPM? Arch-specific src rpms out of the build system have been known to cause problems. The one of my fedorapeople page is not known to. (2) For starters, Is "cobbler check" showing no signs of anything you need to fix? (3) How about sharing the relevant authn and authz sections of your "/etc/cobbler/modules.conf" file? (4) Is this install perhaps an upgrade from a much older version of Cobbler? If so, that may cause problems and you should revisit https://fedorahosted.org/cobbler/wiki/CobblerWebInterface (5) selinux booleans can prevent connections. Cobbler check will report on these. (6) Try changing the any cobbler XMLRPC addresses in the Cobbler config from localhost to 127.0.0.1, it may be that localhost does not resolve. > I've tried restarting both daemons, switching authentication methods to > something besides digest (didn't help). > authn_testing allows "testing/testing" ? That does not work? Is your Apache configuration in any way modified from a stock install? This is rather important as depending on setup options this can cause problems. > The user is listed as an admin group member in the authorization group > config file. cobblerd doesn't seem to > be logging output to /var/log/cobbler/cobblerd.log, even if I uncomment > all the debug log info at the top of > cobblerd. > > It's /var/log/cobbler/cobbler.log, the daemon does not have it's own log. > I also poked around in my Apache httpd configs, but didn't see anything > immediately off - the cobbler.conf is from > the cobbler distribution, and authentication works as far as Apache and > mod_python are concerned. > > Does anyone have any ideas on how/where I can fix this? Cobbler's main > functionality seems to be okay, but I'd > really like to get the web UI working before I go any further. > > Sure... take a shot at the above and we can perhaps dive further depending on answers... It's probably something simple. > Any help would be appreciated. Thanks! > > -steve > _______________________________________________ > cobbler mailing list > [email protected] > https://fedorahosted.org/mailman/listinfo/cobbler > _______________________________________________ cobbler mailing list [email protected] https://fedorahosted.org/mailman/listinfo/cobbler
