URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file
MartinBasti commented:
"""
After restore I cannot connect to webUI
```
[Wed Mar 22 16:43:48.779900 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] mod_wsgi (pid=100377): Exception
occurred processing WSGI script '/usr/share/ipa/wsgi.py'.
[Wed Mar 22 16:43:48.780002 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] Traceback (most recent call last):
[Wed Mar 22 16:43:48.780059 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] File "/usr/share/ipa/wsgi.py", line
51, in application
[Wed Mar 22 16:43:48.780592 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] return
api.Backend.wsgi_dispatch(environ, start_response)
[Wed Mar 22 16:43:48.780618 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] File
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 262, in __call__
[Wed Mar 22 16:43:48.781029 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] return self.route(environ,
start_response)
[Wed Mar 22 16:43:48.781050 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] File
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 274, in route
[Wed Mar 22 16:43:48.781086 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] return app(environ, start_response)
[Wed Mar 22 16:43:48.781110 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] File
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 913, in __call__
[Wed Mar 22 16:43:48.781146 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] self.kinit(user_principal,
password, ipa_ccache_name)
[Wed Mar 22 16:43:48.781162 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] File
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 947, in kinit
[Wed Mar 22 16:43:48.781180 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] kinit_armor(armor_path)
[Wed Mar 22 16:43:48.781215 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] File
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 125, in
kinit_armor
[Wed Mar 22 16:43:48.781306 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] run(args, env=env, raiseonerr=True,
capture_error=True)
[Wed Mar 22 16:43:48.781331 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] File
"/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 495, in run
[Wed Mar 22 16:43:48.781788 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] raise
CalledProcessError(p.returncode, arg_string, str(output))
[Wed Mar 22 16:43:48.781873 2017] [wsgi:error] [pid 100377] [remote
2620:52:0:2280:206a:7885:fe7b:1356:184] CalledProcessError: Command
'/usr/bin/kinit -n -c /var/run/ipa/ccaches/armor_100377' returned non-zero exit
status 1
```
KDc log
```
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100354](info):
AS_REQ (6 etypes {18 17 16 23 25 26}) 10.34.78.126: ISSUE: authtime 1490197428,
etypes {rep=18 tkt=18 ses=18},
WELLKNOWN/anonym...@abc.idm.lab.eng.brq.redhat.com for
krbtgt/abc.idm.lab.eng.brq.redhat....@abc.idm.lab.eng.brq.redhat.com
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100354](info):
closing down fd 11
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100357](info):
AS_REQ (6 etypes {18 17 16 23 25 26}) 10.34.78.126: NEEDED_PREAUTH:
WELLKNOWN/anonym...@abc.idm.lab.eng.brq.redhat.com for
krbtgt/abc.idm.lab.eng.brq.redhat....@abc.idm.lab.eng.brq.redhat.com,
Additional pre-authentication required
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100357](info):
closing down fd 11
```
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/607#issuecomment-288442807
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
