[Freeipa-users] ipa client install problem

Uzor Ide ide4you at gmail.com
Mon Jun 27 17:49:34 UTC 2011


Did you provide the join-in principal (admin at YOUR_REALM)? If you didn't try
providing it and the password at the command line.


On Mon, Jun 27, 2011 at 1:20 PM, JoachimBadzong
<badzong at wizard.franken.de>wrote:

> Hi,
>
> ok, your advice to take a look into the /var/log/httpd/error_log was
> good as far as i found here more information.
> On the other side i have to admit that these errors doesn't tell me
> really anything about what i could do.
> So i post the messages here and hope that somebody has further ideas :-)
>
> So from error_log when i try to make ipa-client-install:
>
> [Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: non-public:
> AttributeError: 'thread._local' object has no attribute 'principal'
> [Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last):
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 218, in
> wsgi_execute
> [Mon Jun 27 19:13:57 2011] [error]     result =
> self.Command[name](*args, **options)
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 421, in
> __call__
> [Mon Jun 27 19:13:57 2011] [error]     ret = self.run(*args, **options)
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 727, in run
> [Mon Jun 27 19:13:57 2011] [error]     return self.execute(*args,
> **options)
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipaserver/plugins/join.py", line 105,
> in execute
> [Mon Jun 27 19:13:57 2011] [error]     allowed = ldap.can_write(dn,
> 'krblastpwdchange')
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f
> [Mon Jun 27 19:13:57 2011] [error]     return f(*new_args, **kwargs)
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 705,
> in can_write
> [Mon Jun 27 19:13:57 2011] [error]     (dn, attrs) =
> self.get_effective_rights(dn, [attr])
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipalib/encoder.py", line 188, in new_f
> [Mon Jun 27 19:13:57 2011] [error]     return f(*new_args, **kwargs)
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 691,
> in get_effective_rights
> [Mon Jun 27 19:13:57 2011] [error]     principal = getattr(context,
> 'principal')
> [Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local'
> object has no attribute 'principal'
> [Mon Jun 27 19:13:57 2011] [error] ipa: ERROR: xmlserver.__call__():
> [Mon Jun 27 19:13:57 2011] [error] Traceback (most recent call last):
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 246, in
> __call__
> [Mon Jun 27 19:13:57 2011] [error]     response =
> self.wsgi_execute(environ)
> [Mon Jun 27 19:13:57 2011] [error]   File
> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 230, in
> wsgi_execute
> [Mon Jun 27 19:13:57 2011] [error]     self.info('%s: %s(%s): %s',
> context.principal, name, ',
> '.join(self.Command[name]._repr_iter(**params)), e.__class__.__name__)
> [Mon Jun 27 19:13:57 2011] [error] AttributeError: 'thread._local'
> object has no attribute 'principal'
>
> Thanks
>
>
> Am Montag, den 27.06.2011, 12:41 -0400 schrieb Uzor Ide:
> > If it is new install you can run the install command with a --debug
> > switch to see what it would report. You can also take look
> > at /var/log/httpd/error_log and access_log on the server.
> >
> > I had simillar issue but the server was an upgrade.
> > I found out though, that the error is very generic.
> >
> > The fix in my case, was a re-install of some packages on the server.
> >
> > __Ide
> >
> > On Mon, Jun 27, 2011 at 12:01 PM, JoachimBadzong
> > <badzong at wizard.franken.de> wrote:
> >         Hi,
> >
> >         have just checked that folder on server side:
> >         -rw-r--r-- 1 root root  1209  6. Mai 16:50 browserconfig.html
> >         -rw-r--r-- 1 root root 15076  6. Mai 16:50 ipa_error.css
> >         -rw-r--r-- 1 root root  2954  6. Mai 16:50 ssbrowser.html
> >         -rw-r--r-- 1 root root  1502  6. Mai 16:50 unauthorized.html
> >
> >         Is there anything missing ?
> >         Its an new install on naked new installed fc15 box.
> >
> >         Thanks
> >
> >         Am Montag, den 27.06.2011, 09:08 -0400 schrieb Uzor Ide:
> >
> >         > Your server is missing some files.
> >         > Check and make sure that you have some files in
> >         the /etc/ipa/html
> >         > directory
> >         >
> >         > This usually occurs when you do an in-place upgrade of the
> >         fedora box
> >         > containing freeipa-server
> >         >
> >         >
> >         > __Ide
> >         >
> >         > On Sun, Jun 26, 2011 at 1:00 PM, JoachimBadzong
> >         > <badzong at wizard.franken.de> wrote:
> >         >         Hi,
> >         >
> >         >         i have setup an freeipa server ( 2.0.1-2 ) with FC15
> >         and have
> >         >         now tried
> >         >         to install the ipa client on client machine.
> >         >         When i start the ipa-client-install ( 2.0.1-2 ) it
> >         detects
> >         >         everyting as
> >         >         it should be. I can enter admin prinicipal and the
> >         passowrd,
> >         >         but then i
> >         >         get the following error message :
> >         >
> >         >          Joining realm failed because of failing XML-RPC
> >         request.
> >         >          This error may be caused by incompatible
> >         server/client major
> >         >         versions.
> >         >
> >         >         As both rpms ( server and client ) have the same
> >         version i
> >         >         just dont
> >         >         understand the message.
> >         >
> >         >         Whats wrong ?
> >         >         Where can i look to find more information to solve
> >         that ?
> >         >
> >         >         Thanks for any hint.
> >         >         J
> >         >
> >         >
> >         >         _______________________________________________
> >         >         Freeipa-users mailing list
> >         >         Freeipa-users at redhat.com
> >         >
> >         https://www.redhat.com/mailman/listinfo/freeipa-users
> >         >
> >
> >
> >
> >
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20110627/d3bed745/attachment.htm>


More information about the Freeipa-users mailing list