Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2016-11-04 Thread Martin Basti



On 04.11.2016 13:22, SOLER SANGUESA Miguel wrote:


Hello,

I’m updating the topic, because I have the same problem with:

$ ipa --version

VERSION: 4.2.0, API_VERSION: 2.156

On RHEL 7.2

For Opera and Chrome (latest versions) the pop up appears, but not in 
Firefox (last version). The configuration is in /var/log/httpd/access_log:


…

# Protect /ipa and everything below it in webspace with Apache 
Kerberos auth




  AuthType GSSAPI

  AuthName "Kerberos Login"

  GssapiCredStore keytab:/etc/httpd/conf/ipa.keytab

  GssapiCredStore client_keytab:/etc/httpd/conf/ipa.keytab

  GssapiDelegCcacheDir /var/run/httpd/ipa/clientcaches

  GssapiUseS4U2Proxy on

  Require valid-user

  ErrorDocument 401 /ipa/errors/unauthorized.html

  WSGIProcessGroup ipa

  WSGIApplicationGroup ipa



…

It can not be deleted because it is used when it is used the console 
commands, but has anyone a workaround to disable it on the web GUI?


Thanks & Regards.

__

*Miguel Soler Sangüesa*





Hello,

this was fixed in RHEL7.3, is not possible to backport fix in RHEL7.2, 
as it requires newer version of mod_gssapi


Martin


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2013-02-11 Thread Petr Vobornik

On 02/10/2013 06:30 PM, Rajnesh Kumar Siwal wrote:

Hi All,

As I try to login into the IPA through https, it displays me a popup
window to login.
But login fails through it every time. I don't understand why this
popup window is for.
Screenshot of pop-up window attached.

In the next screen, I login through Form-Based authentication and that
works fine.

Why does this POP-up window appears and why my login fails everytime
(I try to login through admin user)
Please suggest

Thanks in advance.



Hi,

it looks like a HTTP basic authentication dialog. FreeIPA doesn't use 
this method. Is it possible, that you, or some other application on the 
machine modified apache configuration and enabled it?


HTH
--
Petr Vobornik

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2013-02-11 Thread Rajnesh Kumar Siwal
Thanks, Petr,

I would like to confirm that I did not manually install any other
application on it.
I will dig further on it , if I could fetch out the reason.


On Mon, Feb 11, 2013 at 9:23 AM, Petr Vobornik pvobo...@redhat.com wrote:
 On 02/10/2013 06:30 PM, Rajnesh Kumar Siwal wrote:

 Hi All,

 As I try to login into the IPA through https, it displays me a popup
 window to login.
 But login fails through it every time. I don't understand why this
 popup window is for.
 Screenshot of pop-up window attached.

 In the next screen, I login through Form-Based authentication and that
 works fine.

 Why does this POP-up window appears and why my login fails everytime
 (I try to login through admin user)
 Please suggest

 Thanks in advance.


 Hi,

 it looks like a HTTP basic authentication dialog. FreeIPA doesn't use this
 method. Is it possible, that you, or some other application on the machine
 modified apache configuration and enabled it?

 HTH
 --
 Petr Vobornik



-- 
Regards,
Rajnesh Kumar Siwal

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2013-02-11 Thread Eivind Olsen
Rajnesh Kumar Siwal wrote:

 Thanks, Petr,

 I would like to confirm that I did not manually install any other
 application on it.
 I will dig further on it , if I could fetch out the reason.

Did you get any closer to finding out what's causing this? I get the same
kind of pop-up window here, but only in some web browsers: I get the
pop-up in MS Internet Explorer and Google Chrome, but not in Firefox.
Opera gives me a Unknown Error instead.

(this is on RHEL 6.3 w/IPA 2.2.0-17, btw)

Regards
Eivind Olsen


___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2013-02-11 Thread Eivind Olsen
Eivind Olsen wrote:

 Did you get any closer to finding out what's causing this? I get the same
 kind of pop-up window here, but only in some web browsers: I get the
 pop-up in MS Internet Explorer and Google Chrome, but not in Firefox.
 Opera gives me a Unknown Error instead.
 (this is on RHEL 6.3 w/IPA 2.2.0-17, btw)

Hm, I normally try to not reply to myself, but thought I'd add that after
upgrading Opera from 11.x to 12.14 I no longer get the Unknown Error,
but instead I get a login pop-up just like I did with MSIE and Chrome.

Regards
Eivind Olsen


___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2013-02-11 Thread Dmitri Pal
On 02/11/2013 02:16 PM, Eivind Olsen wrote:
 Eivind Olsen wrote:

 Did you get any closer to finding out what's causing this? I get the same
 kind of pop-up window here, but only in some web browsers: I get the
 pop-up in MS Internet Explorer and Google Chrome, but not in Firefox.
 Opera gives me a Unknown Error instead.
 (this is on RHEL 6.3 w/IPA 2.2.0-17, btw)
 Hm, I normally try to not reply to myself, but thought I'd add that after
 upgrading Opera from 11.x to 12.14 I no longer get the Unknown Error,
 but instead I get a login pop-up just like I did with MSIE and Chrome.

 Regards
 Eivind Olsen

So which versions of the browsers we are talking about?
I wonder if you hitting the case when the method we used on configuring
the browser does not work any more on the newer browsers.
We saw some problems with latest versions of FF so we had add a fix for
3.0.
If your initial configuration did not happen properly you might need to
configure you browser manually.
There is a procedure in the manual regarding configuring the browser.


 ___
 Freeipa-users mailing list
 Freeipa-users@redhat.com
 https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


---
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2013-02-11 Thread Rob Crittenden

Dmitri Pal wrote:

On 02/11/2013 02:16 PM, Eivind Olsen wrote:

Eivind Olsen wrote:


Did you get any closer to finding out what's causing this? I get the same
kind of pop-up window here, but only in some web browsers: I get the
pop-up in MS Internet Explorer and Google Chrome, but not in Firefox.
Opera gives me a Unknown Error instead.
(this is on RHEL 6.3 w/IPA 2.2.0-17, btw)

Hm, I normally try to not reply to myself, but thought I'd add that after
upgrading Opera from 11.x to 12.14 I no longer get the Unknown Error,
but instead I get a login pop-up just like I did with MSIE and Chrome.

Regards
Eivind Olsen


So which versions of the browsers we are talking about?
I wonder if you hitting the case when the method we used on configuring
the browser does not work any more on the newer browsers.
We saw some problems with latest versions of FF so we had add a fix for
3.0.
If your initial configuration did not happen properly you might need to
configure you browser manually.
There is a procedure in the manual regarding configuring the browser.


I just don't know why an authentication dialog would pop up unless 
KrbMethodK5Passwd was set to on in /etc/httpd/conf.d/ipa.conf.


It might be handy to use something like the Live HTTP Headers plugin to 
capture the dialog to see what is actually being exchanged.


rob

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2013-02-10 Thread Dmitri Pal
On 02/10/2013 12:30 PM, Rajnesh Kumar Siwal wrote:
 Hi All,

 As I try to login into the IPA through https, it displays me a popup
 window to login.
 But login fails through it every time. I don't understand why this
 popup window is for.
 Screenshot of pop-up window attached.

 In the next screen, I login through Form-Based authentication and that
 works fine.

 Why does this POP-up window appears and why my login fails everytime
 (I try to login through admin user)
 Please suggest

 Thanks in advance.


Which version of IPA do you use?
Did you follow the instructions on how to import IPA cert into your browser?



 ___
 Freeipa-users mailing list
 Freeipa-users@redhat.com
 https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


---
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2013-02-10 Thread Rajnesh Kumar Siwal
Versions:
OS: CentOS 6.3
IPA: 2.2

On Sun, Feb 10, 2013 at 5:30 PM, Rajnesh Kumar Siwal
rajnesh.si...@gmail.com wrote:
 Hi All,

 As I try to login into the IPA through https, it displays me a popup
 window to login.
 But login fails through it every time. I don't understand why this
 popup window is for.
 Screenshot of pop-up window attached.

 In the next screen, I login through Form-Based authentication and that
 works fine.

 Why does this POP-up window appears and why my login fails everytime
 (I try to login through admin user)
 Please suggest

 Thanks in advance.
 --
 Regards,
 Rajnesh Kumar Siwal



-- 
Regards,
Rajnesh Kumar Siwal

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] The htaccess login pop-up window appears but login never succeeds

2013-02-10 Thread Rajnesh Kumar Siwal
Did you follow the instructions on how to import IPA cert into your browser ?
Not yet.
Will following the instructions test that part also and will let you know.
But I need to understand what this htaccess page is trying to do.


On Mon, Feb 11, 2013 at 4:10 AM, Rajnesh Kumar Siwal
rajnesh.si...@gmail.com wrote:
 Versions:
 OS: CentOS 6.3
 IPA: 2.2

 On Sun, Feb 10, 2013 at 5:30 PM, Rajnesh Kumar Siwal
 rajnesh.si...@gmail.com wrote:
 Hi All,

 As I try to login into the IPA through https, it displays me a popup
 window to login.
 But login fails through it every time. I don't understand why this
 popup window is for.
 Screenshot of pop-up window attached.

 In the next screen, I login through Form-Based authentication and that
 works fine.

 Why does this POP-up window appears and why my login fails everytime
 (I try to login through admin user)
 Please suggest

 Thanks in advance.
 --
 Regards,
 Rajnesh Kumar Siwal



 --
 Regards,
 Rajnesh Kumar Siwal



-- 
Regards,
Rajnesh Kumar Siwal

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users