Re: [Freeipa-users] Client-Install failures
It is where mod_auth_gssapi drops the ccache file indeed. But if it failed to do so you should have an authentication error in the logs. Can you check if you see anything in the error log, perhaps rasing logging level to debug. Simo. - Original Message - > From: "David Zabner" > To: "Simo Sorce" > Cc: "Martin Kosek" , freeipa-users@redhat.com > Sent: Thursday, January 28, 2016 10:18:06 AM > Subject: Re: [Freeipa-users] Client-Install failures > > Any guess as what it would be then? > The location that is “missing a file” is specified by the gssapi config in > /etc/httpd/conf.d/ipa.conf. So I assumed that this would be a mod_gssapi > failure… > > > Thanks for your help, > David > > On Jan 28, 2016, at 5:55 AM, Simo Sorce wrote: > > > > Doesn't look related to mod_auth_gssapi, it's past it. > > > > - Original Message - > >> From: "Martin Kosek" > >> To: "David Zabner" , freeipa-users@redhat.com, "Simo > >> Sorce" > >> Sent: Thursday, January 28, 2016 4:42:57 AM > >> Subject: Re: [Freeipa-users] Client-Install failures > >> > >> On 01/26/2016 10:20 PM, David Zabner wrote: > >>> Hi All, > >>> I am working on automated deployment of ipa clients through a program > >>> called salt and have been seeing an issue. > >>> Specifically, calls to ipa.server.internal/ipa/json occasionally return a > >>> 500 error. This tends to occur while using ipa-client-install and ipa-dns > >>> commands. > >>> > >>> I am on free-ipa v 4.2.0 running on Centos 7 and will include the > >>> offending > >>> httpd error log. > >>> Thanks for your help, > >>> David > >> > >> CCing Simo, I wonder if this error could be some problem caused by > >> mod_auth_gssapi? > >> > >> [Tue Jan 26 20:28:00.456181 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] mod_wsgi (pid=9535): Exception occurred processing WSGI > >> script '/usr/share/ipa/wsgi.py'. > >> [Tue Jan 26 20:28:00.456211 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] Traceback (most recent call last): > >> [Tue Jan 26 20:28:00.456223 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] File "/usr/share/ipa/wsgi.py", line 49, in > >> application > >> [Tue Jan 26 20:28:00.456245 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] return api.Backend.wsgi_dispatch(environ, > >> start_response) > >> [Tue Jan 26 20:28:00.456251 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] File > >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 258, in > >> __call__ > >> [Tue Jan 26 20:28:00.456263 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] return self.route(environ, start_response) > >> [Tue Jan 26 20:28:00.456268 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] File > >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 270, in > >> route > >> [Tue Jan 26 20:28:00.456276 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] return app(environ, start_response) > >> [Tue Jan 26 20:28:00.456281 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] File > >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 447, in > >> __call__ > >> [Tue Jan 26 20:28:00.456288 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] response = super(jsonserver, > >> self).__call__(environ, > >> start_response) > >> [Tue Jan 26 20:28:00.456293 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] File > >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 647, in > >> __call__ > >> [Tue Jan 26 20:28:00.456299 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] 'xmlserver', user_ccache, environ, start_response, > >> headers) > >> [Tue Jan 26 20:28:00.456304 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] File > >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 593, in > >> finalize_kerberos_acquisition > >> [Tue Jan 26 20:28:00.456310 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] session_data['ccache_data'] = > >> load_ccache_data(ccache_name) > >> [Tue Jan 26 20:28:00.456315 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] File > >> "/usr/lib/python2.7/site-packages/ipalib/session.py", > >> line1231, in load_ccache_data > >> [Tue Jan 26 20:28:00.456330 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] src = open(name) > >> [Tue Jan 26 20:28:00.456344 2016] [:error] [pid 9535] [remote > >> 10.11.135.180:220] IOError: [Errno 2] No such file or directory: > >> '/var/run/httpd/ipa/ clientcaches/admin@FOO.INTERNAL' > >> > >> Martin > >> > > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Client-Install failures
Any guess as what it would be then? The location that is “missing a file” is specified by the gssapi config in /etc/httpd/conf.d/ipa.conf. So I assumed that this would be a mod_gssapi failure… Thanks for your help, David > On Jan 28, 2016, at 5:55 AM, Simo Sorce wrote: > > Doesn't look related to mod_auth_gssapi, it's past it. > > - Original Message - >> From: "Martin Kosek" >> To: "David Zabner" , freeipa-users@redhat.com, "Simo >> Sorce" >> Sent: Thursday, January 28, 2016 4:42:57 AM >> Subject: Re: [Freeipa-users] Client-Install failures >> >> On 01/26/2016 10:20 PM, David Zabner wrote: >>> Hi All, >>> I am working on automated deployment of ipa clients through a program >>> called salt and have been seeing an issue. >>> Specifically, calls to ipa.server.internal/ipa/json occasionally return a >>> 500 error. This tends to occur while using ipa-client-install and ipa-dns >>> commands. >>> >>> I am on free-ipa v 4.2.0 running on Centos 7 and will include the offending >>> httpd error log. >>> Thanks for your help, >>> David >> >> CCing Simo, I wonder if this error could be some problem caused by >> mod_auth_gssapi? >> >> [Tue Jan 26 20:28:00.456181 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] mod_wsgi (pid=9535): Exception occurred processing WSGI >> script '/usr/share/ipa/wsgi.py'. >> [Tue Jan 26 20:28:00.456211 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] Traceback (most recent call last): >> [Tue Jan 26 20:28:00.456223 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] File "/usr/share/ipa/wsgi.py", line 49, in application >> [Tue Jan 26 20:28:00.456245 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] return api.Backend.wsgi_dispatch(environ, >> start_response) >> [Tue Jan 26 20:28:00.456251 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] File >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 258, in >> __call__ >> [Tue Jan 26 20:28:00.456263 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] return self.route(environ, start_response) >> [Tue Jan 26 20:28:00.456268 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] File >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 270, in >> route >> [Tue Jan 26 20:28:00.456276 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] return app(environ, start_response) >> [Tue Jan 26 20:28:00.456281 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] File >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 447, in >> __call__ >> [Tue Jan 26 20:28:00.456288 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] response = super(jsonserver, self).__call__(environ, >> start_response) >> [Tue Jan 26 20:28:00.456293 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] File >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 647, in >> __call__ >> [Tue Jan 26 20:28:00.456299 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] 'xmlserver', user_ccache, environ, start_response, >> headers) >> [Tue Jan 26 20:28:00.456304 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] File >> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 593, in >> finalize_kerberos_acquisition >> [Tue Jan 26 20:28:00.456310 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] session_data['ccache_data'] = >> load_ccache_data(ccache_name) >> [Tue Jan 26 20:28:00.456315 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] File >> "/usr/lib/python2.7/site-packages/ipalib/session.py", >> line1231, in load_ccache_data >> [Tue Jan 26 20:28:00.456330 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] src = open(name) >> [Tue Jan 26 20:28:00.456344 2016] [:error] [pid 9535] [remote >> 10.11.135.180:220] IOError: [Errno 2] No such file or directory: >> '/var/run/httpd/ipa/ clientcaches/admin@FOO.INTERNAL' >> >> Martin >> -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Client-Install failures
Doesn't look related to mod_auth_gssapi, it's past it. - Original Message - > From: "Martin Kosek" > To: "David Zabner" , freeipa-users@redhat.com, "Simo Sorce" > > Sent: Thursday, January 28, 2016 4:42:57 AM > Subject: Re: [Freeipa-users] Client-Install failures > > On 01/26/2016 10:20 PM, David Zabner wrote: > > Hi All, > > I am working on automated deployment of ipa clients through a program > > called salt and have been seeing an issue. > > Specifically, calls to ipa.server.internal/ipa/json occasionally return a > > 500 error. This tends to occur while using ipa-client-install and ipa-dns > > commands. > > > > I am on free-ipa v 4.2.0 running on Centos 7 and will include the offending > > httpd error log. > > Thanks for your help, > > David > > CCing Simo, I wonder if this error could be some problem caused by > mod_auth_gssapi? > > [Tue Jan 26 20:28:00.456181 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] mod_wsgi (pid=9535): Exception occurred processing WSGI > script '/usr/share/ipa/wsgi.py'. > [Tue Jan 26 20:28:00.456211 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] Traceback (most recent call last): > [Tue Jan 26 20:28:00.456223 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] File "/usr/share/ipa/wsgi.py", line 49, in application > [Tue Jan 26 20:28:00.456245 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] return api.Backend.wsgi_dispatch(environ, > start_response) > [Tue Jan 26 20:28:00.456251 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] File > "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 258, in > __call__ > [Tue Jan 26 20:28:00.456263 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] return self.route(environ, start_response) > [Tue Jan 26 20:28:00.456268 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] File > "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 270, in > route > [Tue Jan 26 20:28:00.456276 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] return app(environ, start_response) > [Tue Jan 26 20:28:00.456281 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] File > "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 447, in > __call__ > [Tue Jan 26 20:28:00.456288 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] response = super(jsonserver, self).__call__(environ, > start_response) > [Tue Jan 26 20:28:00.456293 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] File > "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 647, in > __call__ > [Tue Jan 26 20:28:00.456299 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] 'xmlserver', user_ccache, environ, start_response, > headers) > [Tue Jan 26 20:28:00.456304 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] File > "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 593, in > finalize_kerberos_acquisition > [Tue Jan 26 20:28:00.456310 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] session_data['ccache_data'] = > load_ccache_data(ccache_name) > [Tue Jan 26 20:28:00.456315 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] File > "/usr/lib/python2.7/site-packages/ipalib/session.py", > line1231, in load_ccache_data > [Tue Jan 26 20:28:00.456330 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] src = open(name) > [Tue Jan 26 20:28:00.456344 2016] [:error] [pid 9535] [remote > 10.11.135.180:220] IOError: [Errno 2] No such file or directory: > '/var/run/httpd/ipa/ clientcaches/admin@FOO.INTERNAL' > > Martin > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Client-Install failures
On 01/26/2016 10:20 PM, David Zabner wrote: Hi All, I am working on automated deployment of ipa clients through a program called salt and have been seeing an issue. Specifically, calls to ipa.server.internal/ipa/json occasionally return a 500 error. This tends to occur while using ipa-client-install and ipa-dns commands. I am on free-ipa v 4.2.0 running on Centos 7 and will include the offending httpd error log. Thanks for your help, David CCing Simo, I wonder if this error could be some problem caused by mod_auth_gssapi? [Tue Jan 26 20:28:00.456181 2016] [:error] [pid 9535] [remote 10.11.135.180:220] mod_wsgi (pid=9535): Exception occurred processing WSGI script '/usr/share/ipa/wsgi.py'. [Tue Jan 26 20:28:00.456211 2016] [:error] [pid 9535] [remote 10.11.135.180:220] Traceback (most recent call last): [Tue Jan 26 20:28:00.456223 2016] [:error] [pid 9535] [remote 10.11.135.180:220] File "/usr/share/ipa/wsgi.py", line 49, in application [Tue Jan 26 20:28:00.456245 2016] [:error] [pid 9535] [remote 10.11.135.180:220] return api.Backend.wsgi_dispatch(environ, start_response) [Tue Jan 26 20:28:00.456251 2016] [:error] [pid 9535] [remote 10.11.135.180:220] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 258, in __call__ [Tue Jan 26 20:28:00.456263 2016] [:error] [pid 9535] [remote 10.11.135.180:220] return self.route(environ, start_response) [Tue Jan 26 20:28:00.456268 2016] [:error] [pid 9535] [remote 10.11.135.180:220] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 270, in route [Tue Jan 26 20:28:00.456276 2016] [:error] [pid 9535] [remote 10.11.135.180:220] return app(environ, start_response) [Tue Jan 26 20:28:00.456281 2016] [:error] [pid 9535] [remote 10.11.135.180:220] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 447, in __call__ [Tue Jan 26 20:28:00.456288 2016] [:error] [pid 9535] [remote 10.11.135.180:220] response = super(jsonserver, self).__call__(environ, start_response) [Tue Jan 26 20:28:00.456293 2016] [:error] [pid 9535] [remote 10.11.135.180:220] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 647, in __call__ [Tue Jan 26 20:28:00.456299 2016] [:error] [pid 9535] [remote 10.11.135.180:220] 'xmlserver', user_ccache, environ, start_response, headers) [Tue Jan 26 20:28:00.456304 2016] [:error] [pid 9535] [remote 10.11.135.180:220] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",line 593, in finalize_kerberos_acquisition [Tue Jan 26 20:28:00.456310 2016] [:error] [pid 9535] [remote 10.11.135.180:220] session_data['ccache_data'] = load_ccache_data(ccache_name) [Tue Jan 26 20:28:00.456315 2016] [:error] [pid 9535] [remote 10.11.135.180:220] File "/usr/lib/python2.7/site-packages/ipalib/session.py", line1231, in load_ccache_data [Tue Jan 26 20:28:00.456330 2016] [:error] [pid 9535] [remote 10.11.135.180:220] src = open(name) [Tue Jan 26 20:28:00.456344 2016] [:error] [pid 9535] [remote 10.11.135.180:220] IOError: [Errno 2] No such file or directory: '/var/run/httpd/ipa/ clientcaches/admin@FOO.INTERNAL' Martin -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
