Are you able to authenticate with kinit?
Does krb5kdc.log shows you some error?
On 11/17/2017 12:17 PM, Chris Dagdigian via FreeIPA-users wrote:
Did the "yum upgrade" followed by "sudo ipa-server-upgrade" followed by
a reboot on two different IPA servers
Now the webUI fails on both. The webUI error is:
Cannot connect to the server, please check API accesibility
(certificate, API, proxy, etc.)
httpd error log says this:
[Fri Nov 17 14:08:38.914506 2017] [:error] [pid 2748] ipa: INFO: ***
PROCESS START ***
[Fri Nov 17 14:08:39.002769 2017] [:error] [pid 2747] ipa: INFO: ***
PROCESS START ***
[Fri Nov 17 14:11:42.214284 2017] [auth_gssapi:error] [pid 2749] [client
172.29.128.180:54933] NO AUTH DATA Client did not send any
authentication headers, referer: https://usaeilidmp002.xxx.org/ipa/ui/
[Fri Nov 17 14:11:42.304960 2017] [auth_gssapi:error] [pid 2749] [client
172.29.128.180:54933] GSS ERROR In Negotiate Auth:
gss_accept_sec_context() failed: [An unsupported mechanism was requested
(Unknown error)], referer: https://usaeilidmp002.xxx.org/ipa/ui/
[root@usaeilidmp002 httpd]#
Browser is Chrome - same as I've always been using to access the admin UI
Any tips or guidance? May have to restore from backup
Chris
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
