[Freeipa] [Bug 1909003] Re: dogtag 10.8.3 gui does not work in ubuntu 20.04
The Groovy Gorilla has reached end of life, so this bug will not be
fixed for that release
** Changed in: resteasy3.0 (Ubuntu Groovy)
Status: In Progress => Won't Fix
--
You received this bug notification because you are a member of FreeIPA,
which is subscribed to dogtag-pki in Ubuntu.
https://bugs.launchpad.net/bugs/1909003
Title:
dogtag 10.8.3 gui does not work in ubuntu 20.04
Status in dogtag-pki package in Ubuntu:
Fix Released
Status in resteasy3.0 package in Ubuntu:
Fix Released
Status in dogtag-pki source package in Focal:
In Progress
Status in resteasy3.0 source package in Focal:
In Progress
Status in dogtag-pki source package in Groovy:
Won't Fix
Status in resteasy3.0 source package in Groovy:
Won't Fix
Bug description:
Accessing the GUI creates the following issue:
curl -k https://localhost:8443/ca/
HTTP Status 500 – Internal Server
Errorbody {font-family:Tahoma,Arial,sans-serif;}
h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2
{font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;}
.line
{height:1px;background-color:#525D76;border:none;}HTTP
Status 500 – Internal Server ErrorType
Exception ReportMessage org.apache.jasper.JasperException: Unable
to compile class for JSPDescription The server encountered an
unexpected condition that prevented it from fulfilling the
request.Exceptionorg.apache.jasper.JasperException:
org.apache.jasper.JasperException: Unable to compile class for JSP
org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:605)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:423)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:385)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:329)
javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
Root Causeorg.apache.jasper.JasperException: Unable
to compile class for JSP
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:621)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:400)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:385)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:329)
javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
Root Causejavax.el.ELException: Provider
com.sun.el.ExpressionFactoryImpl not found
javax.el.FactoryFinder.newInstance(FactoryFinder.java:101)
javax.el.FactoryFinder.find(FactoryFinder.java:197)
javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:197)
javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:168)
org.apache.jasper.compiler.PageInfo.init(PageInfo.java:80)
org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:120)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:386)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:362)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:346)
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:605)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:400)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:385)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:329)
javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
Root Causejava.lang.ClassNotFoundException:
com.sun.el.ExpressionFactoryImpl
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1365)
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1188)
javax.el.FactoryFinder.newInstance(FactoryFinder.java:87)
javax.el.FactoryFinder.find(FactoryFinder.java:197)
javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:197)
javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:168)
org.apache.jasper.compiler.PageInfo.init(PageInfo.java:80)
org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:120)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:386)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:362)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:346)
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:605)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:400)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:385)
[Freeipa] [Bug 1909003] Re: dogtag 10.8.3 gui does not work in ubuntu 20.04
The Groovy Gorilla has reached end of life, so this bug will not be
fixed for that release
** Changed in: dogtag-pki (Ubuntu Groovy)
Status: In Progress => Won't Fix
--
You received this bug notification because you are a member of FreeIPA,
which is subscribed to dogtag-pki in Ubuntu.
https://bugs.launchpad.net/bugs/1909003
Title:
dogtag 10.8.3 gui does not work in ubuntu 20.04
Status in dogtag-pki package in Ubuntu:
Fix Released
Status in resteasy3.0 package in Ubuntu:
Fix Released
Status in dogtag-pki source package in Focal:
In Progress
Status in resteasy3.0 source package in Focal:
In Progress
Status in dogtag-pki source package in Groovy:
Won't Fix
Status in resteasy3.0 source package in Groovy:
Won't Fix
Bug description:
Accessing the GUI creates the following issue:
curl -k https://localhost:8443/ca/
HTTP Status 500 – Internal Server
Errorbody {font-family:Tahoma,Arial,sans-serif;}
h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2
{font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;}
.line
{height:1px;background-color:#525D76;border:none;}HTTP
Status 500 – Internal Server ErrorType
Exception ReportMessage org.apache.jasper.JasperException: Unable
to compile class for JSPDescription The server encountered an
unexpected condition that prevented it from fulfilling the
request.Exceptionorg.apache.jasper.JasperException:
org.apache.jasper.JasperException: Unable to compile class for JSP
org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:605)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:423)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:385)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:329)
javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
Root Causeorg.apache.jasper.JasperException: Unable
to compile class for JSP
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:621)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:400)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:385)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:329)
javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
Root Causejavax.el.ELException: Provider
com.sun.el.ExpressionFactoryImpl not found
javax.el.FactoryFinder.newInstance(FactoryFinder.java:101)
javax.el.FactoryFinder.find(FactoryFinder.java:197)
javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:197)
javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:168)
org.apache.jasper.compiler.PageInfo.init(PageInfo.java:80)
org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:120)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:386)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:362)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:346)
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:605)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:400)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:385)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:329)
javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
Root Causejava.lang.ClassNotFoundException:
com.sun.el.ExpressionFactoryImpl
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1365)
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1188)
javax.el.FactoryFinder.newInstance(FactoryFinder.java:87)
javax.el.FactoryFinder.find(FactoryFinder.java:197)
javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:197)
javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:168)
org.apache.jasper.compiler.PageInfo.init(PageInfo.java:80)
org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:120)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:386)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:362)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:346)
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:605)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:400)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:385)
[Freeipa] [Bug 1693154] Update Released
The verification of the Stable Release Update for freeipa has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions. -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1693154 Title: ipa-client-install fails: kinit: Included profile directory could not be read while initializing Kerberos 5 library Status in freeipa package in Ubuntu: Fix Released Status in freeipa source package in Zesty: Fix Released Status in kerberos-configs package in Debian: New Bug description: [Impact] ipa-client-install fails because it modifies /etc/krb5.conf to include /etc/krb5.conf.d which doesn't exist, so kinit fails. The (temporary) fix is to add /etc/krb5.conf.d directory to freeipa- client. [Test case] Enroll an IPA client with ipa-client-install, it should pass. [Regression potential] None, this is a safe addition. [original description] Ubuntu 17.04's freeipa-client has a regression (compared to 16.04 LTS) wrt. joining a FreeIPA kerberos server. I am running a server on 10.111.112.100 with a COCKPIT.LAN domain (from the "ipa-*" image on https://fedorapeople.org/groups/cockpit/images/), and realmd.service fails. Running ipa-client-install manually shows why: $ sudo DEBIAN_FRONTEND=noninteractive apt -y install freeipa-client realmd sssd-tools packagekit $ echo 'nameserver 10.111.112.100' | sudo tee -a /etc/resolv.conf $ sudo ipa-client-install --domain cockpit.lan --realm COCKPIT.LAN --mkhomedir --enable-dns-updates --unattended --force-join --principal admin -W --force-ntpd -w foobarfoo Discovery was successful! Client hostname: autopkgtest Realm: COCKPIT.LAN DNS Domain: cockpit.lan IPA Server: f0.cockpit.lan BaseDN: dc=cockpit,dc=lan Synchronizing time with KDC... Attempting to sync time using ntpd. Will timeout after 15 seconds Attempting to sync time using ntpd. Will timeout after 15 seconds Unable to sync time with NTP server, assuming the time is in sync. Please check that 123 UDP port is opened. Please make sure the following ports are opened in the firewall settings: TCP: 80, 88, 389 UDP: 88 (at least one of TCP/UDP ports 88 has to be open) Also note that following ports are necessary for ipa-client working properly after enrollment: TCP: 464 UDP: 464, 123 (if NTP enabled) Kerberos authentication failed: kinit: Included profile directory could not be read while initializing Kerberos 5 library Installation failed. Rolling back changes. IPA client is not configured on this system. stracing shows that it tries to access /etc/krb5.conf.d/ which does not exist. mkdir'ing this is sufficient to fix it. I'm not entirely sure if this is really in freeipa-client or krb5-user (kinit), but running "kinit -f ad...@cockpit.lan" directly succeeds. ProblemType: Bug DistroRelease: Ubuntu 17.04 Package: freeipa-client 4.4.3-3ubuntu2 ProcVersionSignature: User Name 4.10.0-21.23-generic 4.10.11 Uname: Linux 4.10.0-21-generic x86_64 ApportVersion: 2.20.4-0ubuntu4.1 Architecture: amd64 Date: Wed May 24 09:30:57 2017 ProcEnviron: TERM=xterm PATH=(custom, no user) XDG_RUNTIME_DIR= LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: freeipa UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1693154/+subscriptions ___ Mailing list: https://launchpad.net/~freeipa Post to : freeipa@lists.launchpad.net Unsubscribe : https://launchpad.net/~freeipa More help : https://help.launchpad.net/ListHelp
[Freeipa] [Bug 1685115] Re: opendnssec 2.0 broke FreeIPA DNSSEC setup
** Changed in: freeipa (Ubuntu Artful) Assignee: (unassigned) => Dimitri John Ledkov (xnox) -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1685115 Title: opendnssec 2.0 broke FreeIPA DNSSEC setup Status in freeipa package in Ubuntu: New Status in freeipa source package in Zesty: New Status in freeipa source package in Artful: New Bug description: [Impact] https://pagure.io/freeipa/issue/6873 Not fixed upstream yet, this is a placeholder bug. [Test case] Run 'ipa-dns-install --dnssec-master' after ipa-server-install. [Regression potential] To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1685115/+subscriptions ___ Mailing list: https://launchpad.net/~freeipa Post to : freeipa@lists.launchpad.net Unsubscribe : https://launchpad.net/~freeipa More help : https://help.launchpad.net/ListHelp
[Freeipa] [Bug 1677139] Re: pkcs11 setup needs fixes for SoftHSM 2.2
** Changed in: freeipa (Ubuntu Artful) Assignee: (unassigned) => Dimitri John Ledkov (xnox) -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1677139 Title: pkcs11 setup needs fixes for SoftHSM 2.2 Status in freeipa package in Ubuntu: Confirmed Status in freeipa source package in Zesty: Confirmed Status in freeipa source package in Artful: Confirmed Bug description: [Impact] https://pagure.io/freeipa/issue/6692 SoftHSM 2.2 broke freeipa DNS integration. [Test case] Install ipa server with 'ipa-server-install --setup-dns'. [Regression potential] The patch touches only the pkcs11 helper, so shouldn't regress anything else. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1677139/+subscriptions ___ Mailing list: https://launchpad.net/~freeipa Post to : freeipa@lists.launchpad.net Unsubscribe : https://launchpad.net/~freeipa More help : https://help.launchpad.net/ListHelp
[Freeipa] [Bug 1691655] Re: pki-base postinst creates corrupt /etc/pki/pki.version
** Changed in: dogtag-pki (Ubuntu Zesty) Status: New => Incomplete -- You received this bug notification because you are a member of FreeIPA, which is subscribed to dogtag-pki in Ubuntu. https://bugs.launchpad.net/bugs/1691655 Title: pki-base postinst creates corrupt /etc/pki/pki.version Status in dogtag-pki package in Ubuntu: Fix Released Status in dogtag-pki source package in Zesty: Incomplete Bug description: [Impact] Upgrading pki-base from xenial to zesty fails, because /etc/pki/pki.versio created on xenial looks like this: Configuration-Version: 10.2.6+git20160317 while it should just have 10.2.6. To fix the upgrade, the file should be recreated if old pki-base is older than 10.3.5-1. [Test case] Install pki-base on a xenial chroot, sed -i 's/xenial/zesty' /etc/apt/sources.list, apt dist-upgrade. It should not fail. [Regression potential] Can't think of any. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dogtag-pki/+bug/1691655/+subscriptions ___ Mailing list: https://launchpad.net/~freeipa Post to : freeipa@lists.launchpad.net Unsubscribe : https://launchpad.net/~freeipa More help : https://help.launchpad.net/ListHelp
[Freeipa] [Bug 1691655] Re: pki-base postinst creates corrupt /etc/pki/pki.version
Is this fixed in the development release of Ubuntu, Artful Aardvark? -- You received this bug notification because you are a member of FreeIPA, which is subscribed to dogtag-pki in Ubuntu. https://bugs.launchpad.net/bugs/1691655 Title: pki-base postinst creates corrupt /etc/pki/pki.version Status in dogtag-pki package in Ubuntu: New Status in dogtag-pki source package in Zesty: New Bug description: [Impact] Upgrading pki-base from xenial to zesty fails, because /etc/pki/pki.versio created on xenial looks like this: Configuration-Version: 10.2.6+git20160317 while it should just have 10.2.6. To fix the upgrade, the file should be recreated if old pki-base is older than 10.3.5-1. [Test case] Install pki-base on a xenial chroot, sed -i 's/xenial/zesty' /etc/apt/sources.list, apt dist-upgrade. It should not fail. [Regression potential] Can't think of any. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dogtag-pki/+bug/1691655/+subscriptions ___ Mailing list: https://launchpad.net/~freeipa Post to : freeipa@lists.launchpad.net Unsubscribe : https://launchpad.net/~freeipa More help : https://help.launchpad.net/ListHelp
