[Freeipa-users] freeipa - f12 - web gui logon issues
Rob Crittenden
rcritten at redhat.com
Thu Apr 15 20:38:49 UTC 2010
Tom Brown wrote:
>
>>
>> Not sure which howto you referred to but this covers it pretty well
>> http://freeipa.org/docs/1.2/Client_Setup_Guide/en-US/html/chap-Client_Configuration_Guide-Configuring_Your_Browser.html
>>
>>
>> For troubleshooting the client side see
>> http://freeipa.org/docs/1.2/Installation_Deployment_Guide/en-US/html/sect-Installation_and_Deployment_Guide-Setting_up_the_IPA_Server-Configuring_Your_Browser.html#sect-Installation_and_Deployment_Guide-Configuring_Your_Browser-Troubleshooting
>>
>>
>> The logs to look at are:
>>
>> /var/log/httpd/error_log (you'll probably want to set LogLevel debug
>> in /etc/httpd/conf/httpd.conf and restart the httpd service first).
>>
>> The KDC log might be interesting, /var/log/krb5kdc.log
>>
>> I assume that you have a kerberos ticket? Sometimes quiting Firefox,
>> doing a kdestroy, kinit, restart Firefox helps.
>>
>>
>
> ok seems my mistake was not doing the kinit admin as the user using
> firefox, doing that seems to have made me able to get into the GUI.
>
> I am now presented with a different issue though - the GUI seemed to
> work but now it just hangs loading and i see this in the logs
>
> [Thu Apr 15 20:05:40 2010] [error] [client 192.168.10.14] proxy: Error
> reading from remote server returned by /ipa/ui/topsearch, referer:
> https://ipa-server.ng23.net/ipa/ui
> [Thu Apr 15 20:07:53 2010] [error] [client 192.168.10.14] (70007)The
> timeout specified has expired: proxy: error reading status line from
> remote server localhost
> [Thu Apr 15 20:07:53 2010] [error] [client 192.168.10.14] proxy: Error
> reading from remote server returned by /ipa/ui/topsearch
> [Thu Apr 15 20:08:30 2010] [error] [client 192.168.10.14] (70007)The
> timeout specified has expired: proxy: error reading status line from
> remote server localhost
> [Thu Apr 15 20:08:30 2010] [error] [client 192.168.10.14] proxy: Error
> reading from remote server returned by /ipa/ui/topsearch
> [Thu Apr 15 20:09:37 2010] [error] [client 192.168.10.14] (70007)The
> timeout specified has expired: proxy: error reading status line from
> remote server localhost
> [Thu Apr 15 20:09:37 2010] [error] [client 192.168.10.14] proxy: Error
> reading from remote server returned by /ipa/ui/topsearch
> [Thu Apr 15 20:09:45 2010] [error] [client 192.168.10.14] (70007)The
> timeout specified has expired: proxy: error reading status line from remote
>
> thanks
>
>
>
This is IPA v1.2 I gather? Try looking in /var/log/ipa_error.log, that
is the UI log.
In V1 we use TurboGears to create the UI pages. Apache handles the
authentication using mod_auth_kerb and once the user is authenticated
mod_proxy sends the request to the TurboGears process (ipa_webgui).
Perhaps the TurboGears process died or is otherwise some sort of bad shape.
rob
More information about the Freeipa-users
mailing list