[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-23 Thread tomaskrizek 
  URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

tomaskrizek commented:
"""
master:

* 2612c092dd797c9c8f772c785aae1f152f06847d Backup ipa-specific httpd unit-file
ipa-4-5:

* 59342a7f6fffe2aaf0b8ce4e10bb41444d8fa25f Backup ipa-specific httpd unit-file
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/607#issuecomment-288659254
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-22 Thread MartinBasti 
  URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

MartinBasti commented:
"""
However it fixed issue listed in ticket, so this can resolved in separate PR.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/607#issuecomment-288443377
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-22 Thread MartinBasti 
  URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

MartinBasti commented:
"""
After restore I cannot connect to webUI

```
[Wed Mar 22 16:43:48.779900 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] mod_wsgi (pid=100377): Exception 
occurred processing WSGI script '/usr/share/ipa/wsgi.py'.
[Wed Mar 22 16:43:48.780002 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] Traceback (most recent call last):
[Wed Mar 22 16:43:48.780059 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184]   File "/usr/share/ipa/wsgi.py", line 
51, in application
[Wed Mar 22 16:43:48.780592 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] return 
api.Backend.wsgi_dispatch(environ, start_response)
[Wed Mar 22 16:43:48.780618 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184]   File 
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 262, in __call__
[Wed Mar 22 16:43:48.781029 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] return self.route(environ, 
start_response)
[Wed Mar 22 16:43:48.781050 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184]   File 
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 274, in route
[Wed Mar 22 16:43:48.781086 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] return app(environ, start_response)
[Wed Mar 22 16:43:48.781110 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184]   File 
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 913, in __call__
[Wed Mar 22 16:43:48.781146 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] self.kinit(user_principal, 
password, ipa_ccache_name)
[Wed Mar 22 16:43:48.781162 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184]   File 
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 947, in kinit
[Wed Mar 22 16:43:48.781180 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] kinit_armor(armor_path)
[Wed Mar 22 16:43:48.781215 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184]   File 
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 125, in 
kinit_armor
[Wed Mar 22 16:43:48.781306 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] run(args, env=env, raiseonerr=True, 
capture_error=True)
[Wed Mar 22 16:43:48.781331 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184]   File 
"/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 495, in run
[Wed Mar 22 16:43:48.781788 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] raise 
CalledProcessError(p.returncode, arg_string, str(output))
[Wed Mar 22 16:43:48.781873 2017] [wsgi:error] [pid 100377] [remote 
2620:52:0:2280:206a:7885:fe7b:1356:184] CalledProcessError: Command 
'/usr/bin/kinit -n -c /var/run/ipa/ccaches/armor_100377' returned non-zero exit 
status 1

```

KDc log
```
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100354](info): 
AS_REQ (6 etypes {18 17 16 23 25 26}) 10.34.78.126: ISSUE: authtime 1490197428, 
etypes {rep=18 tkt=18 ses=18}, 
WELLKNOWN/anonym...@abc.idm.lab.eng.brq.redhat.com for 
krbtgt/abc.idm.lab.eng.brq.redhat@abc.idm.lab.eng.brq.redhat.com
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100354](info): 
closing down fd 11
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100357](info): 
AS_REQ (6 etypes {18 17 16 23 25 26}) 10.34.78.126: NEEDED_PREAUTH: 
WELLKNOWN/anonym...@abc.idm.lab.eng.brq.redhat.com for 
krbtgt/abc.idm.lab.eng.brq.redhat@abc.idm.lab.eng.brq.redhat.com, 
Additional pre-authentication required
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100357](info): 
closing down fd 11

```
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/607#issuecomment-288442807
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-16 Thread stlaz 
  URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

stlaz commented:
"""
We need to perform `paths.SYSTEMCTL --system daemon-reload` here as well.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/607#issuecomment-287091722
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-16 Thread stlaz 
  URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

stlaz commented:
"""
Ah, right.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/607#issuecomment-287032822
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-16 Thread tiran 
  URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

tiran commented:
"""
The symlink is generated by a script when httpd is started.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/607#issuecomment-287029814
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-16 Thread stlaz 
  URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

stlaz commented:
"""
Thanks, @tiran, this is a good idea, I noticed also KDCProxy conf symlink was 
missing.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/607#issuecomment-287029314
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-16 Thread tiran 
  URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

tiran commented:
"""
LGTM

Did you check if there are more files missing after backup, uninstall, restore? 
You could use ```find /etc /usr /var >before_uninstall``` before uninstall and 
after restore, then compare the files with diff.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/607#issuecomment-287009174
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code