Hello,

it is caused by missing canonical name on services which were created in older versions of FreeIPA. Fixed ticket here: https://fedorahosted.org/freeipa/ticket/6397 .

On 12/07/2016 11:48 AM, Fujisan wrote:
And with Firefox 50.0.2.

F.

On Wed, Dec 7, 2016 at 11:46 AM, Fujisan <fujisa...@gmail.com <mailto:fujisa...@gmail.com>> wrote:

    I have the same issue with version 4.4.2

    $ rpm -qa|grep freeipa
    freeipa-server-4.4.2-1.fc25.x86_64
    freeipa-python-compat-4.4.2-1.fc25.noarch
    freeipa-server-common-4.4.2-1.fc25.noarch
    freeipa-common-4.4.2-1.fc25.no
    <http://freeipa-common-4.4.2-1.fc25.no>arch
    freeipa-server-trust-ad-4.4.2-1.fc25.x86_64
    freeipa-client-4.4.2-1.fc25.x86_64
    freeipa-client-common-4.4.2-1.fc25.noarch


    ​F.​


    On Wed, Dec 7, 2016 at 11:13 AM, Troels Hansen <t...@casalogic.dk
    <mailto:t...@casalogic.dk>> wrote:

        I have a strange issue in IPA 4.4.0-12 (RHEL 7.3)


        Navigating to Identity -> Services reveals 5 services. 2 cifs,
        2 dogtag and one empty line...

        cifs/host1.domain@REALM
        cifs/host2.domain@REALM
        dogtag/ipa01.domain@REALM
        dogtag/ipa02.domain@REALM



        However, from CLI everything looks OK:

        # ipa service-find
        -------------------
        11 services matched
        -------------------
        Principal name: ldap/ipa02.domain@REALM
        Principal alias: ldap/ipa02.domain@REALM
        Certificate: .......
        .......


        Keytab: True

        Principal name: ldap/ipa01.domain@REALM
        Principal alias: ldap/ipa01.domain@REALM
        Certificate: .......
        .......


        Keytab: True

        Principal name: HTTP/ipa02.domain@REALM
        Principal alias: HTTP/ipa02.domain@REALM
        Certificate: ........
        .......



        Keytab: True

        Principal name: cifs/rhellxudv01.domain@REALM
        Principal alias: cifs/rhellxudv01.domain@REALM
        Keytab: True



        Principal name: cifs/ipa02.domain@REALM
        Principal alias: cifs/ipa02.domain@REALM
        Keytab: True



        Principal name: nfs/profil01.domain@REALM
        Principal alias: nfs/profil01.domain@REALM
        Keytab: True



        Principal name: cifs/ipa01.domain@REALM
        Principal alias: cifs/ipa01.domain@REALM
        Keytab: True

        Principal name: dogtag/ipa02.domain@REALM
        Principal alias: dogtag/ipa02.domain@REALM
        Keytab: True



        Principal name: dogtag/ipa01.domain@REALM
        Principal alias: dogtag/ipa01.domain@REALM
        Keytab: True



        Principal name: cifs/rhellxudv02.domain@REALM
        Principal alias: cifs/rhellxudv02.domain@REALM
        Keytab: True



        Principal name: HTTP/ipa01.domain@REALM
        Principal alias: HTTP/ipa01.domain@REALM
        Certificate: ..............
        ..............
        Keytab: True



        -----------------------------
        Number of entries returned 11
        -----------------------------




        (some lines truncated.....)


        soooo... somsthing must be disrupting the view in web-ui,


        Tried in Chrome 43 and IE 11


        Looking at what gets requested by the browser at
        /ipa/session/json I can see in the json that it gets the
        correct content:


        result: {count: 11, result: [,…], summary: "11 services
        matched", truncated: false}
        count: 11
        result: [,…]
        0: {dn:
        
"krbprincipalname=cifs/rhellxudv01.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        1: {dn:
        
"krbprincipalname=dogtag/ipa01.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        2: {dn:
        
"krbprincipalname=nfs/profil01.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        3: {dn:
        
"krbprincipalname=cifs/rhellxudv02.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        4: {dn:
        
"krbprincipalname=dogtag/ipa02.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        5: {dn:
        
"krbprincipalname=HTTP/ipa01.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        6: {dn:
        
"krbprincipalname=cifs/ipa02.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        7: {dn:
        
"krbprincipalname=cifs/ipa01.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        8: {dn:
        
"krbprincipalname=ldap/ipa01.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        9: {dn:
        
"krbprincipalname=HTTP/ipa02.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        10: {dn:
        
"krbprincipalname=ldap/ipa02.domain@REALM,cn=services,cn=accounts,dc=domain",…}
        summary: "11 services matched"
        truncated: false



        So this is obviously only a web-ui problem, but I can't see
        what causes the problem?


        --
        Manage your subscription for the Freeipa-users mailing list:
        https://www.redhat.com/mailman/listinfo/freeipa-users
        <https://www.redhat.com/mailman/listinfo/freeipa-users>
        Go to http://freeipa.org for more info on the project






--
Pavel^3 Vomacka

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to