Re: [Freeipa-users] ui timeout issue

2013-11-26 Thread Dmitri Pal
On 11/26/2013 03:37 PM, siology.io wrote: I'm seeing an issue with logging into the web UI of ipa. I've been using IPA for 6 months or so in production, and all has been well so far. The last thing i did in terms of IPA was run ipa-dns-install, which completed successfully, but i suspect

Re: [Freeipa-users] ui timeout issue

2013-11-26 Thread siology.io
On 27 November 2013 10:21, Dmitri Pal d...@redhat.com wrote: On 11/26/2013 03:37 PM, siology.io wrote: I'm seeing an issue with logging into the web UI of ipa. I've been using IPA for 6 months or so in production, and all has been well so far. The last thing i did in terms of IPA was run

Re: [Freeipa-users] ui timeout issue

2013-11-26 Thread Dmitri Pal
On 11/26/2013 04:32 PM, siology.io wrote: On 27 November 2013 10:21, Dmitri Pal d...@redhat.com mailto:d...@redhat.com wrote: On 11/26/2013 03:37 PM, siology.io http://siology.io wrote: I'm seeing an issue with logging into the web UI of ipa. I've been using IPA for 6 months

Re: [Freeipa-users] ui timeout issue

2013-11-26 Thread siology.io
yeah maybe. I do see from the install log of the ipa-dns-install that it changed the /etc/resolv.conf to point to its own ip - which seems a little odd (and unwanted, more importantly). I've changed that back to how it should be and restarted ipa but still nothing. There's no other KDC in the

Re: [Freeipa-users] ui timeout issue

2013-11-26 Thread siology.io
for what it's worth, kinit on the command line of the ipa server works just fine, and detects the realm ok. On 27 November 2013 11:00, siology.io siology...@gmail.com wrote: yeah maybe. I do see from the install log of the ipa-dns-install that it changed the /etc/resolv.conf to point to its

Re: [Freeipa-users] ui timeout issue

2013-11-26 Thread Dmitri Pal
On 11/26/2013 05:15 PM, siology.io wrote: for what it's worth, kinit on the command line of the ipa server works just fine, and detects the realm ok. OK then let us rule out DNS for a moment. Have you checked the KDC log to see whether the authentication actually occurred? If kinit works, I