[Freeipa-users] freeipa - f12 - web gui logon issues

[Rob Crittenden]

Tom Brown wrote:
> 
>>
>> Not sure which howto you referred to but this covers it pretty well
>> http://freeipa.org/docs/1.2/Client_Setup_Guide/en-US/html/chap-Client_Configuration_Guide-Configuring_Your_Browser.html 
>>
>>
>> For troubleshooting the client side see 
>> http://freeipa.org/docs/1.2/Installation_Deployment_Guide/en-US/html/sect-Installation_and_Deployment_Guide-Setting_up_the_IPA_Server-Configuring_Your_Browser.html#sect-Installation_and_Deployment_Guide-Configuring_Your_Browser-Troubleshooting 
>>
>>
>> The logs to look at are:
>>
>> /var/log/httpd/error_log (you'll probably want to set LogLevel debug 
>> in /etc/httpd/conf/httpd.conf and restart the httpd service first).
>>
>> The KDC log might be interesting, /var/log/krb5kdc.log
>>
>> I assume that you have a kerberos ticket? Sometimes quiting Firefox, 
>> doing a kdestroy, kinit, restart Firefox helps.
>>
>>
> 
> ok seems my mistake was not doing the kinit admin as the user using 
> firefox, doing that seems to have made me able to get into the GUI.
> 
> I am now presented with a different issue though - the GUI seemed to 
> work but now it just hangs loading and i see this in the logs
> 
> [Thu Apr 15 20:05:40 2010] [error] [client 192.168.10.14] proxy: Error 
> reading from remote server returned by /ipa/ui/topsearch, referer: 
> https://ipa-server.ng23.net/ipa/ui
> [Thu Apr 15 20:07:53 2010] [error] [client 192.168.10.14] (70007)The 
> timeout specified has expired: proxy: error reading status line from 
> remote server localhost
> [Thu Apr 15 20:07:53 2010] [error] [client 192.168.10.14] proxy: Error 
> reading from remote server returned by /ipa/ui/topsearch
> [Thu Apr 15 20:08:30 2010] [error] [client 192.168.10.14] (70007)The 
> timeout specified has expired: proxy: error reading status line from 
> remote server localhost
> [Thu Apr 15 20:08:30 2010] [error] [client 192.168.10.14] proxy: Error 
> reading from remote server returned by /ipa/ui/topsearch
> [Thu Apr 15 20:09:37 2010] [error] [client 192.168.10.14] (70007)The 
> timeout specified has expired: proxy: error reading status line from 
> remote server localhost
> [Thu Apr 15 20:09:37 2010] [error] [client 192.168.10.14] proxy: Error 
> reading from remote server returned by /ipa/ui/topsearch
> [Thu Apr 15 20:09:45 2010] [error] [client 192.168.10.14] (70007)The 
> timeout specified has expired: proxy: error reading status line from remote
> 
> thanks
> 
> 
> 

This is IPA v1.2 I gather? Try looking in /var/log/ipa_error.log, that 
is the UI log.

In V1 we use TurboGears to create the UI pages. Apache handles the 
authentication using mod_auth_kerb and once the user is authenticated 
mod_proxy sends the request to the TurboGears process (ipa_webgui). 
Perhaps the TurboGears process died or is otherwise some sort of bad shape.

rob