[Freeipa-users] Cannot connect to the server, please check API accesibility (certificate, API, proxy, etc.)

2019-07-16 Thread Ben Schofield via FreeIPA-users
Hi folks, We've got an unusual issue that has started to occur recently when trying to view the Users tab in FreeIPA. Trying to load the page (and display all users) results in a popup with title "HTTP Error 404" and the text "Cannot connect to the server, please check API accesibility (certifi

[Freeipa-users] Re: Random [Preauthentication failed] error in krb5

2019-07-16 Thread Raul Gomez via FreeIPA-users
Hello list, After much testing I've found that this issue is not related to the IPA client machine, but to the IPA server the IPA client is using, and that's because I can log in into some of my IPA Servers (via Web Panel), but not to others, and that coincides with the server the clients can/c

[Freeipa-users] Re: freeipa-server failied to instal - Debian

2019-07-16 Thread 810410559--- via FreeIPA-users
Hi Timo At present, the introduction of java11 in debian leads to the use of dogtag, the freeipa-server installation fails, and the following error message is reported. root@node1:~# java -version openjdk version "11.0.4-ea" 2019-07-16 OpenJDK Runtime Environment (build 11.0.4-ea+10-post-Debi

[Freeipa-users] Re: freeipa-server failied to install - Debian9

2019-07-16 Thread Alexander Bokovoy via FreeIPA-users
On ti, 16 heinä 2019, 1292865949--- via FreeIPA-users wrote: Does the freeipa 4.7.1 version have all the deb packages that support the debian system? Now after installing the pki-ca and pki-kra services, the BtoA command on Ubuntu is normal, but the debian system reports an error with the followi

[Freeipa-users] Re: freeipa-server failied to install - Debian9

2019-07-16 Thread 1292865949--- via FreeIPA-users
Does the freeipa 4.7.1 version have all the deb packages that support the debian system? Now after installing the pki-ca and pki-kra services, the BtoA command on Ubuntu is normal, but the debian system reports an error with the following error message: root@node1:~# java -version openjdk versio

[Freeipa-users] Re: freeipa-server failied to install - Debian9

2019-07-16 Thread 1292865949--- via FreeIPA-users
Hi rob Our system have the command. But it doesn't work well. The error log belows. Debian10 installed pki and jdk above is have this bug? We replaced the jdk version into 11.0.3, the problem still exists. How to debug the question? root@node1:~# BtoA -Djava.ext.dirs=/usr/share/pki/lib is not

[Freeipa-users] Re: ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (404)

2019-07-16 Thread Harald Dunkel via FreeIPA-users
On 7/16/19 11:39 AM, François Cami wrote: Please have a look at the latest logs from pki: /var/log/pki/pki-tomcat/ca/ The debug log file on ipa2 gives me an authentication failed for connecting to ldap on ipa2: [16/Jul/2019:09:52:22][localhost-startStop-1]: =

[Freeipa-users] Re: SASL Bind failed Can't contact LDAP server

2019-07-16 Thread Alexander Bokovoy via FreeIPA-users
On ma, 15 heinä 2019, Deepak Subhramanian via FreeIPA-users wrote: Hi Rob, Thanks for the quick follow up. I am getting this error in Ambari - Management tool for Hadoop cluster when it tries to generate the key tabs for all the principals it create for the services in each node. This is actua

[Freeipa-users] Re: freeipa-server failied to install - Debian9

2019-07-16 Thread Alexander Bokovoy via FreeIPA-users
On ti, 16 heinä 2019, 1292865949--- via FreeIPA-users wrote: Hi rob I have another question freeipa(4.7.2-3) on debian. Only the list of deb packages: freeipa-admintools_4.7.2-3_amd64.deb freeipa-common_4.7.2-3_all.deb freeipa-client_4.7.2-3_amd64.deb python-ipaclient_4.7.2-3_all.de

[Freeipa-users] Re: freeipa-server failied to install - Debian9

2019-07-16 Thread 1292865949--- via FreeIPA-users
Hi rob I have another question freeipa(4.7.2-3) on debian. Only the list of deb packages: freeipa-admintools_4.7.2-3_amd64.deb freeipa-common_4.7.2-3_all.deb freeipa-client_4.7.2-3_amd64.deb python-ipaclient_4.7.2-3_all.deb freeipa-client-dbgsym_4.7.2-3_amd64.deb python-ipalib_4.7.2-

[Freeipa-users] Re: freeipa-server failied to install - Debian9

2019-07-16 Thread 1292865949--- via FreeIPA-users
Hi rob I want to install freeipa version 4.7 based on debian9 system, But Debian official apt source only has a part of DEB package, so I install all dependencies through apt-get command, then install these packages manually using dpkg-i command, all configuration is using default configuration,

[Freeipa-users] Re: SASL Bind failed Can't contact LDAP server

2019-07-16 Thread Deepak Subhramanian via FreeIPA-users
Hi Rob, Thanks for the quick follow up. I am getting this error in Ambari - Management tool for Hadoop cluster when it tries to generate the key tabs for all the principals it create for the services in each node. This is actually invoked by some java code in Ambari. I tried to simulate the erro

[Freeipa-users] Re: ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (404)

2019-07-16 Thread François Cami via FreeIPA-users
On Tue, Jul 16, 2019 at 10:00 AM Harald Dunkel via FreeIPA-users wrote: > > On 7/15/19 9:51 PM, Rob Crittenden wrote: > >> > > > > Please check the status again. POST_SAVED_CERT is the status where the > > post command is being executed. It should be in MONITORING now. > > > > Yes, it does. I had

[Freeipa-users] Re: ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (404)

2019-07-16 Thread Harald Dunkel via FreeIPA-users
On 7/15/19 9:51 PM, Rob Crittenden wrote: Please check the status again. POST_SAVED_CERT is the status where the post command is being executed. It should be in MONITORING now. Yes, it does. I had to resubmit a few other certificates, and now the ca-error is gone on all ipa servers, too. N