On 25/05/2023 11:58, lejeczek via FreeIPA-users wrote:
Hi guys.
This is my first trial/test of replicas in container -
here I added a replica to already existing, bare-metal IPA
domain, which otherwise works a okey - so numerous issues
are possible.
In container, only in this replica, I get:
bash-5.1# ipa dnszone-find
ipa: ERROR: No valid Negotiate header in server response
What that is, might be, a symptom of? Where to go with
troubleshooting?
All thoughts share are much appreciated.
many thanks, L.
for experts, bit more debug:
-> $ ipa --debug dnszone-find
ipa: DEBUG: Loading Index file from
'/var/lib/ipa-client/sysrestore/sysrestore.index'
ipa: DEBUG: Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
ipa: DEBUG: Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
ipa: DEBUG: failed to find session_cookie in persistent
storage for principal 'ad...@mine.priv'
ipa: DEBUG: trying https://swir-ipa.mine.priv/ipa/json
ipa: DEBUG: New HTTP connection (swir-ipa.mine.priv)
ipa: DEBUG: HTTP connection destroyed (swir-ipa.mine.priv)
Traceback (most recent call last):
File
"/usr/lib/python3.9/site-packages/ipaclient/remote_plugins/__init__.py",
line 120, in get_package
plugins = api._remote_plugins
AttributeError: 'API' object has no attribute '_remote_plugins'
During handling of the above exception, another exception
occurred:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/ipalib/rpc.py",
line 724, in single_request
if not self._auth_complete(response):
File "/usr/lib/python3.9/site-packages/ipalib/rpc.py",
line 673, in _auth_complete
raise errors.KerberosError(
ipalib.errors.KerberosError: No valid Negotiate header in
server response
ipa: ERROR: No valid Negotiate header in server response
-> $ klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: ad...@mine.priv
Valid starting Expires Service principal
05/25/23 09:46:11 05/26/23 09:40:03 krbtgt/mine.p...@mine.priv
05/25/23 09:47:45 05/26/23 09:40:03
HTTP/swir-ipa.mine.p...@mine.priv
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
