Jonathan Vaughn wrote: > System time appears to be fine. > > Here's the httpd access log (nothing in error log): > 10.10.255.101 - - [18/May/2018:15:26:19 -0500] "GET /ipa/session/cookie > HTTP/1.1" 301 260 "-" "python-requests/2.18.4" > 10.10.255.101 - admin@CREATUITY.INTERNAL [18/May/2018:15:26:20 -0500] > "GET /ipa/session/cookie HTTP/1.1" 200 - > 10.10.11.3 - - [18/May/2018:15:26:18 -0500] "POST > /ipa/session/login_password HTTP/1.1" 200 20 > 10.10.11.3 - admin@CREATUITY.INTERNAL [18/May/2018:15:26:20 -0500] "POST > /ipa/session/json HTTP/1.1" 401 - > 10.10.11.3 - admin@CREATUITY.INTERNAL [18/May/2018:15:26:20 -0500] "GET > /ipa/session/login_kerberos?_=1526674892374 HTTP/1.1" 401 - >
You'll want to look at the error log for more details. For even more output create /etc/ipa/server.conf with the contents: [global] debug = True and restart httpd rob > > On Fri, May 18, 2018 at 3:23 PM, Jonathan Vaughn <jonat...@creatuity.com > <mailto:jonat...@creatuity.com>> wrote: > > Actually - may have spoke too soon. I thought I'd signed in to the > UI but I was actually in another server's UI. When I try to log in > it says that my login has expired... so progress but something else > is busted. > > On Fri, May 18, 2018 at 3:20 PM, Jonathan Vaughn > <jonat...@creatuity.com <mailto:jonat...@creatuity.com>> wrote: > > Looks like replica install finished just fine, and I can access > the the web UI on it. No obvious problems. > > So it would appear that code change fixed 389DS for ARM. > > I'm not running the Dogtag CA on the Pi, just on the non-Pi > servers, otherwise would need to probably adjust the startup > timeout for it so that the install script didn't give up waiting > on it. When I was first trying to play with this I tried > installing the first replica/master on the Pi, and ran into the > Dogtag timeout problem. Even installing Oracle Java instead of > the OpenJDK version of Java didn't solve it, because somehow it > always picks the OpenJDK java instead of oracle even if I change > the alternatives setting to default to the Oracle one... > > But as far as I can tell otherwise, everything is working as > expected. _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/QE52IIO62MUTNUHB4MKWBAQYSCXXDYGM/
