Tom Brown wrote:



Not sure which howto you referred to but this covers it pretty well
http://freeipa.org/docs/1.2/Client_Setup_Guide/en-US/html/chap-Client_Configuration_Guide-Configuring_Your_Browser.html

For troubleshooting the client side see http://freeipa.org/docs/1.2/Installation_Deployment_Guide/en-US/html/sect-Installation_and_Deployment_Guide-Setting_up_the_IPA_Server-Configuring_Your_Browser.html#sect-Installation_and_Deployment_Guide-Configuring_Your_Browser-Troubleshooting

The logs to look at are:

/var/log/httpd/error_log (you'll probably want to set LogLevel debug in /etc/httpd/conf/httpd.conf and restart the httpd service first).

The KDC log might be interesting, /var/log/krb5kdc.log

I assume that you have a kerberos ticket? Sometimes quiting Firefox, doing a kdestroy, kinit, restart Firefox helps.



ok seems my mistake was not doing the kinit admin as the user using firefox, doing that seems to have made me able to get into the GUI.

I am now presented with a different issue though - the GUI seemed to work but now it just hangs loading and i see this in the logs

[Thu Apr 15 20:05:40 2010] [error] [client 192.168.10.14] proxy: Error reading from remote server returned by /ipa/ui/topsearch, referer: https://ipa-server.ng23.net/ipa/ui [Thu Apr 15 20:07:53 2010] [error] [client 192.168.10.14] (70007)The timeout specified has expired: proxy: error reading status line from remote server localhost [Thu Apr 15 20:07:53 2010] [error] [client 192.168.10.14] proxy: Error reading from remote server returned by /ipa/ui/topsearch [Thu Apr 15 20:08:30 2010] [error] [client 192.168.10.14] (70007)The timeout specified has expired: proxy: error reading status line from remote server localhost [Thu Apr 15 20:08:30 2010] [error] [client 192.168.10.14] proxy: Error reading from remote server returned by /ipa/ui/topsearch [Thu Apr 15 20:09:37 2010] [error] [client 192.168.10.14] (70007)The timeout specified has expired: proxy: error reading status line from remote server localhost [Thu Apr 15 20:09:37 2010] [error] [client 192.168.10.14] proxy: Error reading from remote server returned by /ipa/ui/topsearch [Thu Apr 15 20:09:45 2010] [error] [client 192.168.10.14] (70007)The timeout specified has expired: proxy: error reading status line from remote

thanks




This is IPA v1.2 I gather? Try looking in /var/log/ipa_error.log, that is the UI log.

In V1 we use TurboGears to create the UI pages. Apache handles the authentication using mod_auth_kerb and once the user is authenticated mod_proxy sends the request to the TurboGears process (ipa_webgui). Perhaps the TurboGears process died or is otherwise some sort of bad shape.

rob

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to