Re: [Freeipa-users] ipa client install problem
JoachimBadzong wrote: Hi, have just checked that folder on server side: -rw-r--r-- 1 root root 1209 6. Mai 16:50 browserconfig.html -rw-r--r-- 1 root root 15076 6. Mai 16:50 ipa_error.css -rw-r--r-- 1 root root 2954 6. Mai 16:50 ssbrowser.html -rw-r--r-- 1 root root 1502 6. Mai 16:50 unauthorized.html Is there anything missing ? Its an new install on naked new installed fc15 box. Yes, you're missing quite a few files. You are missing the windows config files: krb5.ini, krbrealm.con and krb.con, a copy of the CA, the and the browser autoconfig jar (configure.jar) at least. Your installation was completely successful? rob Thanks Am Montag, den 27.06.2011, 09:08 -0400 schrieb Uzor Ide: Your server is missing some files. Check and make sure that you have some files in the /etc/ipa/html directory This usually occurs when you do an in-place upgrade of the fedora box containing freeipa-server __Ide On Sun, Jun 26, 2011 at 1:00 PM, JoachimBadzong wrote: Hi, i have setup an freeipa server ( 2.0.1-2 ) with FC15 and have now tried to install the ipa client on client machine. When i start the ipa-client-install ( 2.0.1-2 ) it detects everyting as it should be. I can enter admin prinicipal and the passowrd, but then i get the following error message : Joining realm failed because of failing XML-RPC request. This error may be caused by incompatible server/client major versions. As both rpms ( server and client ) have the same version i just dont understand the message. Whats wrong ? Where can i look to find more information to solve that ? Thanks for any hint. J ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] ipa client install problem
Did you provide the join-in principal (admin@YOUR_REALM)? If you didn't try providing it and the password at the command line. On Mon, Jun 27, 2011 at 1:20 PM, JoachimBadzong wrote: > Hi, > > ok, your advice to take a look into the /var/log/httpd/error_log was > good as far as i found here more information. > On the other side i have to admit that these errors doesn't tell me > really anything about what i could do. > So i post the messages here and hope that somebody has further ideas :-) > > So from error_log when i try to make ipa-client-install: > > [Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: non-public: > AttributeError: 'thread._local' object has no attribute 'principal' > [Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last): > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 218, in > wsgi_execute > [Mon Jun 27 19:13:57 2011] [error] result = > self.Command[name](*args, **options) > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 421, in > __call__ > [Mon Jun 27 19:13:57 2011] [error] ret = self.run(*args, **options) > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 727, in run > [Mon Jun 27 19:13:57 2011] [error] return self.execute(*args, > **options) > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipaserver/plugins/join.py", line 105, > in execute > [Mon Jun 27 19:13:57 2011] [error] allowed = ldap.can_write(dn, > 'krblastpwdchange') > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f > [Mon Jun 27 19:13:57 2011] [error] return f(*new_args, **kwargs) > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 705, > in can_write > [Mon Jun 27 19:13:57 2011] [error] (dn, attrs) = > self.get_effective_rights(dn, [attr]) > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f > [Mon Jun 27 19:13:57 2011] [error] return f(*new_args, **kwargs) > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 691, > in get_effective_rights > [Mon Jun 27 19:13:57 2011] [error] principal = getattr(context, > 'principal') > [Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local' > object has no attribute 'principal' > [Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: xmlserver.__call__(): > [Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last): > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 246, in > __call__ > [Mon Jun 27 19:13:57 2011] [error] response = > self.wsgi_execute(environ) > [Mon Jun 27 19:13:57 2011] [error] File > "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 230, in > wsgi_execute > [Mon Jun 27 19:13:57 2011] [error] self.info('%s: %s(%s): %s', > context.principal, name, ', > '.join(self.Command[name]._repr_iter(**params)), e.__class__.__name__) > [Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local' > object has no attribute 'principal' > > Thanks > > > Am Montag, den 27.06.2011, 12:41 -0400 schrieb Uzor Ide: > > If it is new install you can run the install command with a --debug > > switch to see what it would report. You can also take look > > at /var/log/httpd/error_log and access_log on the server. > > > > I had simillar issue but the server was an upgrade. > > I found out though, that the error is very generic. > > > > The fix in my case, was a re-install of some packages on the server. > > > > __Ide > > > > On Mon, Jun 27, 2011 at 12:01 PM, JoachimBadzong > > wrote: > > Hi, > > > > have just checked that folder on server side: > > -rw-r--r-- 1 root root 1209 6. Mai 16:50 browserconfig.html > > -rw-r--r-- 1 root root 15076 6. Mai 16:50 ipa_error.css > > -rw-r--r-- 1 root root 2954 6. Mai 16:50 ssbrowser.html > > -rw-r--r-- 1 root root 1502 6. Mai 16:50 unauthorized.html > > > > Is there anything missing ? > > Its an new install on naked new installed fc15 box. > > > > Thanks > > > > Am Montag, den 27.06.2011, 09:08 -0400 schrieb Uzor Ide: > > > > > Your server is missing some files. > > > Check and make sure that you have some files in > > the /etc/ipa/html > > > directory > > > > > > This usually occurs when you do an in-place upgrade of the > > fedora box > > > containing freeipa-server > > > > > > > > > __Ide > > > > > > On Sun, Jun 26, 2011 at 1:00 PM, JoachimBadzong > > > wrote: > > > Hi, > > > > > > i have setup an freeipa server ( 2.0.1-
Re: [Freeipa-users] ipa client install problem
Hi, ok, your advice to take a look into the /var/log/httpd/error_log was good as far as i found here more information. On the other side i have to admit that these errors doesn't tell me really anything about what i could do. So i post the messages here and hope that somebody has further ideas :-) So from error_log when i try to make ipa-client-install: [Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: non-public: AttributeError: 'thread._local' object has no attribute 'principal' [Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last): [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 218, in wsgi_execute [Mon Jun 27 19:13:57 2011] [error] result = self.Command[name](*args, **options) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 421, in __call__ [Mon Jun 27 19:13:57 2011] [error] ret = self.run(*args, **options) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 727, in run [Mon Jun 27 19:13:57 2011] [error] return self.execute(*args, **options) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/plugins/join.py", line 105, in execute [Mon Jun 27 19:13:57 2011] [error] allowed = ldap.can_write(dn, 'krblastpwdchange') [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f [Mon Jun 27 19:13:57 2011] [error] return f(*new_args, **kwargs) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 705, in can_write [Mon Jun 27 19:13:57 2011] [error] (dn, attrs) = self.get_effective_rights(dn, [attr]) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f [Mon Jun 27 19:13:57 2011] [error] return f(*new_args, **kwargs) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 691, in get_effective_rights [Mon Jun 27 19:13:57 2011] [error] principal = getattr(context, 'principal') [Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local' object has no attribute 'principal' [Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: xmlserver.__call__(): [Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last): [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 246, in __call__ [Mon Jun 27 19:13:57 2011] [error] response = self.wsgi_execute(environ) [Mon Jun 27 19:13:57 2011] [error] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 230, in wsgi_execute [Mon Jun 27 19:13:57 2011] [error] self.info('%s: %s(%s): %s', context.principal, name, ', '.join(self.Command[name]._repr_iter(**params)), e.__class__.__name__) [Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local' object has no attribute 'principal' Thanks Am Montag, den 27.06.2011, 12:41 -0400 schrieb Uzor Ide: > If it is new install you can run the install command with a --debug > switch to see what it would report. You can also take look > at /var/log/httpd/error_log and access_log on the server. > > I had simillar issue but the server was an upgrade. > I found out though, that the error is very generic. > > The fix in my case, was a re-install of some packages on the server. > > __Ide > > On Mon, Jun 27, 2011 at 12:01 PM, JoachimBadzong > wrote: > Hi, > > have just checked that folder on server side: > -rw-r--r-- 1 root root 1209 6. Mai 16:50 browserconfig.html > -rw-r--r-- 1 root root 15076 6. Mai 16:50 ipa_error.css > -rw-r--r-- 1 root root 2954 6. Mai 16:50 ssbrowser.html > -rw-r--r-- 1 root root 1502 6. Mai 16:50 unauthorized.html > > Is there anything missing ? > Its an new install on naked new installed fc15 box. > > Thanks > > Am Montag, den 27.06.2011, 09:08 -0400 schrieb Uzor Ide: > > > Your server is missing some files. > > Check and make sure that you have some files in > the /etc/ipa/html > > directory > > > > This usually occurs when you do an in-place upgrade of the > fedora box > > containing freeipa-server > > > > > > __Ide > > > > On Sun, Jun 26, 2011 at 1:00 PM, JoachimBadzong > > wrote: > > Hi, > > > > i have setup an freeipa server ( 2.0.1-2 ) with FC15 > and have > > now tried > > to install the ipa client on client machine. > > When i start the ipa-client-install ( 2.0.1-2 ) it > detects > > everyting as > > it should be. I can enter admin prinicipal and the > passowrd, > >
Re: [Freeipa-users] ipa client install problem
If it is new install you can run the install command with a --debug switch to see what it would report. You can also take look at /var/log/httpd/error_log and access_log on the server. I had simillar issue but the server was an upgrade. I found out though, that the error is very generic. The fix in my case, was a re-install of some packages on the server. __Ide On Mon, Jun 27, 2011 at 12:01 PM, JoachimBadzong wrote: > Hi, > > have just checked that folder on server side: > -rw-r--r-- 1 root root 1209 6. Mai 16:50 browserconfig.html > -rw-r--r-- 1 root root 15076 6. Mai 16:50 ipa_error.css > -rw-r--r-- 1 root root 2954 6. Mai 16:50 ssbrowser.html > -rw-r--r-- 1 root root 1502 6. Mai 16:50 unauthorized.html > > Is there anything missing ? > Its an new install on naked new installed fc15 box. > > Thanks > > Am Montag, den 27.06.2011, 09:08 -0400 schrieb Uzor Ide: > > Your server is missing some files. > > Check and make sure that you have some files in the /etc/ipa/html > > directory > > > > This usually occurs when you do an in-place upgrade of the fedora box > > containing freeipa-server > > > > > > __Ide > > > > On Sun, Jun 26, 2011 at 1:00 PM, JoachimBadzong > > wrote: > > Hi, > > > > i have setup an freeipa server ( 2.0.1-2 ) with FC15 and have > > now tried > > to install the ipa client on client machine. > > When i start the ipa-client-install ( 2.0.1-2 ) it detects > > everyting as > > it should be. I can enter admin prinicipal and the passowrd, > > but then i > > get the following error message : > > > > Joining realm failed because of failing XML-RPC request. > > This error may be caused by incompatible server/client major > > versions. > > > > As both rpms ( server and client ) have the same version i > > just dont > > understand the message. > > > > Whats wrong ? > > Where can i look to find more information to solve that ? > > > > Thanks for any hint. > > J > > > > > > ___ > > Freeipa-users mailing list > > Freeipa-users@redhat.com > > https://www.redhat.com/mailman/listinfo/freeipa-users > > > > > ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] ipa client install problem
Hi, have just checked that folder on server side: -rw-r--r-- 1 root root 1209 6. Mai 16:50 browserconfig.html -rw-r--r-- 1 root root 15076 6. Mai 16:50 ipa_error.css -rw-r--r-- 1 root root 2954 6. Mai 16:50 ssbrowser.html -rw-r--r-- 1 root root 1502 6. Mai 16:50 unauthorized.html Is there anything missing ? Its an new install on naked new installed fc15 box. Thanks Am Montag, den 27.06.2011, 09:08 -0400 schrieb Uzor Ide: > Your server is missing some files. > Check and make sure that you have some files in the /etc/ipa/html > directory > > This usually occurs when you do an in-place upgrade of the fedora box > containing freeipa-server > > > __Ide > > On Sun, Jun 26, 2011 at 1:00 PM, JoachimBadzong > wrote: > Hi, > > i have setup an freeipa server ( 2.0.1-2 ) with FC15 and have > now tried > to install the ipa client on client machine. > When i start the ipa-client-install ( 2.0.1-2 ) it detects > everyting as > it should be. I can enter admin prinicipal and the passowrd, > but then i > get the following error message : > > Joining realm failed because of failing XML-RPC request. > This error may be caused by incompatible server/client major > versions. > > As both rpms ( server and client ) have the same version i > just dont > understand the message. > > Whats wrong ? > Where can i look to find more information to solve that ? > > Thanks for any hint. > J > > > ___ > Freeipa-users mailing list > Freeipa-users@redhat.com > https://www.redhat.com/mailman/listinfo/freeipa-users > ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] ipa client install problem
Your server is missing some files. Check and make sure that you have some files in the /etc/ipa/html directory This usually occurs when you do an in-place upgrade of the fedora box containing freeipa-server __Ide On Sun, Jun 26, 2011 at 1:00 PM, JoachimBadzong wrote: > Hi, > > i have setup an freeipa server ( 2.0.1-2 ) with FC15 and have now tried > to install the ipa client on client machine. > When i start the ipa-client-install ( 2.0.1-2 ) it detects everyting as > it should be. I can enter admin prinicipal and the passowrd, but then i > get the following error message : > > Joining realm failed because of failing XML-RPC request. > This error may be caused by incompatible server/client major versions. > > As both rpms ( server and client ) have the same version i just dont > understand the message. > > Whats wrong ? > Where can i look to find more information to solve that ? > > Thanks for any hint. > J > > > ___ > Freeipa-users mailing list > Freeipa-users@redhat.com > https://www.redhat.com/mailman/listinfo/freeipa-users > ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
[Freeipa-users] ipa client install problem
Hi, i have setup an freeipa server ( 2.0.1-2 ) with FC15 and have now tried to install the ipa client on client machine. When i start the ipa-client-install ( 2.0.1-2 ) it detects everyting as it should be. I can enter admin prinicipal and the passowrd, but then i get the following error message : Joining realm failed because of failing XML-RPC request. This error may be caused by incompatible server/client major versions. As both rpms ( server and client ) have the same version i just dont understand the message. Whats wrong ? Where can i look to find more information to solve that ? Thanks for any hint. J ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users