Hi Martin, thanks for your replay.
yesterday i did lot of this to fix this issue. the issue has been solved by kdestroy and re-initiate the ticket. after that restarted ipa service, it got worked Regards, ben On Mon, Mar 9, 2015 at 10:57 AM, Martin Kosek <[email protected]> wrote: > Thanks for all the data. So it looks like your browser properly forward the > session cookie, but it is not recognized on the server even though it was > stored before. > > Especially these lines are strange: > > [Sun Mar 08 13:16:29.909637 2015] [:error] [pid 3004] ipa: DEBUG: store > session: session_id=4803e184cecb42f2e326391dbb09443d > start_timestamp=2015-03-08T13:15:12 access_timestamp=2015-03-08T13:16:29 > expiration_timestamp=2015-03-08T13:36:29 > ... > [Sun Mar 08 13:16:29.921519 2015] [:error] [pid 3003] ipa: DEBUG: found > session cookie_id = 4803e184cecb42f2e326391dbb09443d > [Sun Mar 08 13:16:29.921731 2015] [:error] [pid 3003] ipa: DEBUG: no > session data in cache with id=4803e184cecb42f2e326391dbb09443d, generating > empty session data > > We know that ipa_memcached is running. Can you please also check if there > are > no SELinux errors in /var/log/audit/audit.log preveting Apache from > looking up > the session data? > > Thanks, > Martin > > On 03/08/2015 11:44 AM, Ben .T.George wrote: > > i was inspecting the page and got below response. > > > > http://s21.postimg.org/itv5hf0h3/asdasd.jpg > > > > http://s3.postimg.org/f6knomt1f/Capture.jpg > > > > please anyone help me to solve this issue. i just want to create one > local > > user in IPA > > > > On Sun, Mar 8, 2015 at 1:17 PM, Ben .T.George <[email protected]> > wrote: > > > >> I enabled debugging mode on default.conf and this is what i am getting > on > >> error_log > >> > >> [Sun Mar 08 13:16:18.204363 2015] [auth_kerb:error] [pid 3065] [client > >> 172.16.107.250:60088] gss_accept_sec_context() failed: An unsupported > >> mechanism was requested (, Unknown error), referer: > >> https://kwtpocpbis01.solaris.local/ipa/ui/ > >> [Sun Mar 08 13:16:29.849339 2015] [:error] [pid 3004] ipa: DEBUG: WSGI > >> wsgi_dispatch.__call__: > >> [Sun Mar 08 13:16:29.849458 2015] [:error] [pid 3004] ipa: DEBUG: WSGI > >> login_password.__call__: > >> [Sun Mar 08 13:16:29.849683 2015] [:error] [pid 3004] ipa: DEBUG: > >> Obtaining armor ccache: > >> principal=HTTP/[email protected] > >> keytab=/etc/httpd/conf/ipa.keytab > >> ccache=/var/run/ipa_memcached/krbcc_A_admin > >> [Sun Mar 08 13:16:29.849830 2015] [:error] [pid 3004] ipa: DEBUG: > Starting > >> external process > >> [Sun Mar 08 13:16:29.849923 2015] [:error] [pid 3004] ipa: DEBUG: > >> args='/usr/bin/kinit' '-kt' '/etc/httpd/conf/ipa.keytab' > >> 'HTTP/[email protected]' > >> [Sun Mar 08 13:16:29.868747 2015] [:error] [pid 3004] ipa: DEBUG: > Process > >> finished, return code=0 > >> [Sun Mar 08 13:16:29.868858 2015] [:error] [pid 3004] ipa: DEBUG: > stdout= > >> [Sun Mar 08 13:16:29.868955 2015] [:error] [pid 3004] ipa: DEBUG: > stderr= > >> [Sun Mar 08 13:16:29.869120 2015] [:error] [pid 3004] ipa: DEBUG: > Starting > >> external process > >> [Sun Mar 08 13:16:29.869204 2015] [:error] [pid 3004] ipa: DEBUG: > >> args='/usr/bin/kinit' '[email protected]' '-T' > >> '/var/run/ipa_memcached/krbcc_A_admin' > >> [Sun Mar 08 13:16:29.902181 2015] [:error] [pid 3004] ipa: DEBUG: > Process > >> finished, return code=0 > >> [Sun Mar 08 13:16:29.902269 2015] [:error] [pid 3004] ipa: DEBUG: > >> stdout=Password for [email protected]: > >> [Sun Mar 08 13:16:29.902278 2015] [:error] [pid 3004] > >> [Sun Mar 08 13:16:29.902328 2015] [:error] [pid 3004] ipa: DEBUG: > stderr= > >> [Sun Mar 08 13:16:29.902427 2015] [:error] [pid 3004] ipa: DEBUG: kinit: > >> [email protected] returncode=0, stderr="" > >> [Sun Mar 08 13:16:29.902483 2015] [:error] [pid 3004] ipa: DEBUG: > Cleanup > >> the armor ccache > >> [Sun Mar 08 13:16:29.902560 2015] [:error] [pid 3004] ipa: DEBUG: > Starting > >> external process > >> [Sun Mar 08 13:16:29.902621 2015] [:error] [pid 3004] ipa: DEBUG: > >> args='/usr/bin/kdestroy' '-A' '-c' > '/var/run/ipa_memcached/krbcc_A_admin' > >> [Sun Mar 08 13:16:29.908045 2015] [:error] [pid 3004] ipa: DEBUG: > Process > >> finished, return code=0 > >> [Sun Mar 08 13:16:29.908121 2015] [:error] [pid 3004] ipa: DEBUG: > stdout= > >> [Sun Mar 08 13:16:29.908173 2015] [:error] [pid 3004] ipa: DEBUG: > stderr= > >> [Sun Mar 08 13:16:29.908348 2015] [:error] [pid 3004] ipa: DEBUG: found > >> session cookie_id = 4803e184cecb42f2e326391dbb09443d > >> [Sun Mar 08 13:16:29.908647 2015] [:error] [pid 3004] ipa: DEBUG: found > >> session data in cache with id=4803e184cecb42f2e326391dbb09443d > >> [Sun Mar 08 13:16:29.908728 2015] [:error] [pid 3004] ipa: DEBUG: > >> finalize_kerberos_acquisition: login_password > >> ccache_name="FILE:/var/run/ipa_memcached/krbcc_3004" > >> session_id="4803e184cecb42f2e326391dbb09443d" > >> [Sun Mar 08 13:16:29.908824 2015] [:error] [pid 3004] ipa: DEBUG: > reading > >> ccache data from file "/var/run/ipa_memcached/krbcc_3004" > >> [Sun Mar 08 13:16:29.909319 2015] [:error] [pid 3004] ipa: DEBUG: > >> get_credential_times: principal=krbtgt/[email protected], > >> authtime=03/08/15 13:16:29, starttime=03/08/15 13:16:29, > endtime=03/09/15 > >> 13:16:29, renew_till=01/01/70 03:00:00 > >> [Sun Mar 08 13:16:29.909415 2015] [:error] [pid 3004] ipa: DEBUG: > >> KRB5_CCache FILE:/var/run/ipa_memcached/krbcc_3004 endtime=1425896189 > >> (03/09/15 13:16:29) > >> [Sun Mar 08 13:16:29.909538 2015] [:error] [pid 3004] ipa: DEBUG: > >> set_session_expiration_time: duration_type=inactivity_timeout > duration=1200 > >> max_age=1425895889 expiration=1425810989.91 (2015-03-08T13:36:29) > >> [Sun Mar 08 13:16:29.909637 2015] [:error] [pid 3004] ipa: DEBUG: store > >> session: session_id=4803e184cecb42f2e326391dbb09443d > >> start_timestamp=2015-03-08T13:15:12 access_timestamp=2015-03-08T13:16:29 > >> expiration_timestamp=2015-03-08T13:36:29 > >> [Sun Mar 08 13:16:29.910004 2015] [:error] [pid 3004] ipa: DEBUG: > >> release_ipa_ccache: KRB5CCNAME environment variable not set > >> [Sun Mar 08 13:16:29.921259 2015] [:error] [pid 3003] ipa: DEBUG: WSGI > >> wsgi_dispatch.__call__: > >> [Sun Mar 08 13:16:29.921351 2015] [:error] [pid 3003] ipa: DEBUG: WSGI > >> jsonserver_session.__call__: > >> [Sun Mar 08 13:16:29.921519 2015] [:error] [pid 3003] ipa: DEBUG: found > >> session cookie_id = 4803e184cecb42f2e326391dbb09443d > >> [Sun Mar 08 13:16:29.921731 2015] [:error] [pid 3003] ipa: DEBUG: no > >> session data in cache with id=4803e184cecb42f2e326391dbb09443d, > generating > >> empty session data > >> [Sun Mar 08 13:16:29.921875 2015] [:error] [pid 3003] ipa: DEBUG: store > >> session: session_id=4803e184cecb42f2e326391dbb09443d > >> start_timestamp=2015-03-08T13:16:29 access_timestamp=2015-03-08T13:16:29 > >> expiration_timestamp=1970-01-01T03:00:00 > >> [Sun Mar 08 13:16:29.922125 2015] [:error] [pid 3003] ipa: DEBUG: > >> jsonserver_session.__call__: session_id=4803e184cecb42f2e326391dbb09443d > >> start_timestamp=2015-03-08T13:16:29 access_timestamp=2015-03-08T13:16:29 > >> expiration_timestamp=1970-01-01T03:00:00 > >> [Sun Mar 08 13:16:29.922191 2015] [:error] [pid 3003] ipa: DEBUG: no > >> ccache, need login > >> [Sun Mar 08 13:16:29.922265 2015] [:error] [pid 3003] ipa: DEBUG: > >> jsonserver_session: 401 Unauthorized need login > >> > >> > >> On Sun, Mar 8, 2015 at 1:02 PM, Ben .T.George <[email protected]> > >> wrote: > >> > >>> this is the error mesage i am getting on httpd/error_log > >>> > >>> [Sun Mar 08 13:02:02.965470 2015] [auth_kerb:error] [pid 2922] [client > >>> 172.16.107 > >>> .250:60005] > >>> gss_accept_sec_context() failed: An unsupported mechanism was request > >>> > >>> ed (, Unknown error), referer: > >>> https://kwtpocpbis01.solaris.local/ipa/ui/ > >>> > >>> On Sun, Mar 8, 2015 at 12:48 PM, Ben .T.George <[email protected]> > >>> wrote: > >>> > >>>> Hi i checked the services and below is my output > >>>> > >>>> [root@kwtpocpbis01 ipa_memcached]# ps -ef | grep ipa_memcached > >>>> apache 2079 1 0 11:11 ? 00:00:00 /usr/bin/memcached -d > -s > >>>> /var/run/ipa_memcached/ipa_memcached -u apache -m 64 -c 1024 -P > >>>> /var/run/ipa_memcached/ipa_memcached.pid > >>>> root 2801 2504 0 12:48 pts/0 00:00:00 grep --color=auto > >>>> ipa_memcached > >>>> > >>>> [root@kwtpocpbis01 ipa_memcached]# ipactl status > >>>> Directory Service: RUNNING > >>>> krb5kdc Service: RUNNING > >>>> kadmin Service: RUNNING > >>>> named Service: RUNNING > >>>> ipa_memcached Service: RUNNING > >>>> httpd Service: RUNNING > >>>> pki-tomcatd Service: RUNNING > >>>> smb Service: RUNNING > >>>> winbind Service: RUNNING > >>>> ipa-otpd Service: RUNNING > >>>> ipa-dnskeysyncd Service: RUNNING > >>>> ipa: INFO: The ipactl command was successful > >>>> > >>>> > >>>> On Sun, Mar 8, 2015 at 10:54 AM, Ben .T.George <[email protected] > > > >>>> wrote: > >>>> > >>>>> HI > >>>>> > >>>>> i have free IPA 4.1.2 installed. > >>>>> > >>>>> my web ui always giving "Your session has expired. Please re-login." > >>>>> even i tried from different computer.different browsers.. > >>>>> > >>>>> how can i fix this.? > >>>>> > >>>> > >>>> > >>> > >> > > > > > > > >
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
