View Issue Details

IDProjectCategoryView StatusLast Update
0018496CentOS-8ipapublic2022-08-22 08:32
Reportervudex Assigned To 
PrioritynormalSeveritymajorReproducibilityunable to reproduce
Status newResolutionopen 
OSCentOS Stream releaseOS Version8 
Summary0018496: Can't log in into the FreeIPA WebUI
DescriptionHi. After FreeIPA installation everything works fine, until the moment I can't access the WebUI. I investigated some logs:

1) httpd error.log shows issue:
[auth_gssapi:error] [pid 313:tid 139646043899648] [client 10.27.228.30:45830] GSS ERROR gss_acquire_cred[_from]() failed to get server creds: [Unspecified GSS failure. Minor code may provide more information ( SPNEGO cannot find mechanisms to negotiate)]

2) I then tried issue ipa -d ping command with following results:

ipa: DEBUG: New HTTP connection (***.local)
ipa: DEBUG: HTTP connection destroyed (***.local)
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/ipaclient/remote_plugins/__init__.py", line 125, in get_package
    plugins = api._remote_plugins
AttributeError: 'API' object has no attribute '_remote_plugins'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/ipalib/rpc.py", line 725, in single_request
    if not self._auth_complete(response):
  File "/usr/lib/python3.6/site-packages/ipalib/rpc.py", line 675, in _auth_complete
    message=u"No valid Negotiate header in server response")
ipalib.errors.KerberosError: No valid Negotiate header in server response
ipa: ERROR: No valid Negotiate header in server response
Steps To ReproduceUnfortunately, I can't reproduce this issue with clean install. I tried, but the issue just happens after arbitrary time interval.
Additional InformationVersions:
--------------
ipa-server-4.9.8-7.module_el8.6.0+1103+a004f6a8.x86_64
ipa-client-epn-4.9.8-7.module_el8.6.0+1103+a004f6a8.x86_64
mod_auth_gssapi-1.6.1-8.el8.x86_64
httpd-2.4.37-47.module_el8.6.0+1111+ce6f4ceb.1.x86_64
Python 3.6.8
Tags"freeipa", "ipa", CentOS 8 Stream

Activities

toracat

toracat

2022-08-22 08:32

manager   ~0038976

All CentOS Stream-related bugs must be reported to Red Hat. For details, please see:

https://wiki.centos.org/ReportBugs

Issue History

Date Modified Username Field Change
2022-08-15 00:42 vudex New Issue
2022-08-15 00:42 vudex Tag Attached: "freeipa"
2022-08-15 00:42 vudex Tag Attached: "ipa"
2022-08-15 00:42 vudex Tag Attached: CentOS 8 Stream
2022-08-22 08:32 toracat Note Added: 0038976