[Freeipa-users] Client-Install failures

David Zabner david at cazena.com
Thu Jan 28 15:18:06 UTC 2016


Any guess as what it would be then? 
The location that is “missing a file” is specified by the gssapi config in /etc/httpd/conf.d/ipa.conf. So I assumed that this would be a mod_gssapi failure…


Thanks for your help,
David
> On Jan 28, 2016, at 5:55 AM, Simo Sorce <simo at redhat.com> wrote:
> 
> Doesn't look related to mod_auth_gssapi, it's past it.
> 
> ----- Original Message -----
>> From: "Martin Kosek" <mkosek at redhat.com>
>> To: "David Zabner" <david at cazena.com>, freeipa-users at redhat.com, "Simo Sorce" <ssorce at redhat.com>
>> Sent: Thursday, January 28, 2016 4:42:57 AM
>> Subject: Re: [Freeipa-users] Client-Install failures
>> 
>> On 01/26/2016 10:20 PM, David Zabner wrote:
>>> Hi All,
>>> I am working on automated deployment of ipa clients through a program
>>> called salt and have been seeing an issue.
>>> Specifically, calls to ipa.server.internal/ipa/json occasionally return a
>>> 500 error. This tends to occur while using ipa-client-install and ipa-dns
>>> commands.
>>> 
>>> I am on free-ipa v 4.2.0 running on Centos 7 and will include the offending
>>> httpd error log.
>>> Thanks for your help,
>>> David
>> 
>> CCing Simo, I wonder if this error could be some problem caused by
>> mod_auth_gssapi?
>> 
>> [Tue Jan 26 20:28:00.456181 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220] mod_wsgi (pid=9535): Exception occurred processing WSGI
>> script '/usr/share/ipa/wsgi.py'.
>> [Tue Jan 26 20:28:00.456211 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220] Traceback (most recent call last):
>> [Tue Jan 26 20:28:00.456223 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]   File "/usr/share/ipa/wsgi.py", line 49, in application
>> [Tue Jan 26 20:28:00.456245 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]     return api.Backend.wsgi_dispatch(environ,
>> start_response)
>> [Tue Jan 26 20:28:00.456251 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]   File
>> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 258, in
>> __call__
>> [Tue Jan 26 20:28:00.456263 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]     return self.route(environ, start_response)
>> [Tue Jan 26 20:28:00.456268 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]   File
>> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 270, in
>> route
>> [Tue Jan 26 20:28:00.456276 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]     return app(environ, start_response)
>> [Tue Jan 26 20:28:00.456281 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]   File
>> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 447, in
>> __call__
>> [Tue Jan 26 20:28:00.456288 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]     response = super(jsonserver, self).__call__(environ,
>>          start_response)
>> [Tue Jan 26 20:28:00.456293 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]   File
>> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 647, in
>> __call__
>> [Tue Jan 26 20:28:00.456299 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]     'xmlserver', user_ccache, environ, start_response,
>> headers)
>> [Tue Jan 26 20:28:00.456304 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]   File
>> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py",    line 593, in
>> finalize_kerberos_acquisition
>> [Tue Jan 26 20:28:00.456310 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]     session_data['ccache_data'] =
>> load_ccache_data(ccache_name)
>> [Tue Jan 26 20:28:00.456315 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]   File
>> "/usr/lib/python2.7/site-packages/ipalib/session.py",
>> line    1231, in load_ccache_data
>> [Tue Jan 26 20:28:00.456330 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220]     src = open(name)
>> [Tue Jan 26 20:28:00.456344 2016] [:error] [pid 9535] [remote
>> 10.11.135.180:220] IOError: [Errno 2] No such file or directory:
>> '/var/run/httpd/ipa/   clientcaches/admin at FOO.INTERNAL'
>> 
>> Martin
>> 





More information about the Freeipa-users mailing list