#4069 Unathenticated IPA command triggers Internal Server Error
Closed: Fixed None Opened 10 years ago by mkosek.

When running an FreeIPA command with an outdated CCACHE, I got this (master branch):

# ipa host-add client1.example.com
ipa: ERROR: cannot connect to 'https://vm-236.example.com/ipa/json': Internal Server Error

Stacktrace:

[Thu Dec 05 12:02:17.019098 2013] [:error] [pid 27318] [remote 10.34.47.236:59801] Traceback (most recent call last):
[Thu Dec 05 12:02:17.019213 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]   File "/usr/share/ipa/wsgi.py", line 49, in application
[Thu Dec 05 12:02:17.019585 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]     return api.Backend.wsgi_dispatch(environ, start_response)
[Thu Dec 05 12:02:17.019644 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 249, in __call__
[Thu Dec 05 12:02:17.036040 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]     return self.route(environ, start_response)
[Thu Dec 05 12:02:17.036067 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 261, in route
[Thu Dec 05 12:02:17.036098 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]     return app(environ, start_response)
[Thu Dec 05 12:02:17.036136 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 794, in __call__
[Thu Dec 05 12:02:17.036171 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]     self.create_context(ccache=user_ccache)
[Thu Dec 05 12:02:17.036207 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]   File "/usr/lib/python2.7/site-packages/ipalib/backend.py", line 114, in create_context
[Thu Dec 05 12:02:17.052818 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]     self.Backend.ldap2.connect(ccache=ccache)
[Thu Dec 05 12:02:17.052874 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]   File "/usr/lib/python2.7/site-packages/ipalib/backend.py", line 63, in connect
[Thu Dec 05 12:02:17.052934 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]     conn = self.create_connection(*args, **kw)
[Thu Dec 05 12:02:17.052976 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]   File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 164, in create_connection
[Thu Dec 05 12:02:17.059293 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]     conn.simple_bind_s(bind_dn, bind_pw)
[Thu Dec 05 12:02:17.059397 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]   File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
[Thu Dec 05 12:02:17.064749 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]     self.gen.throw(type, value, traceback)
[Thu Dec 05 12:02:17.064814 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]   File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1147, in error_handler
[Thu Dec 05 12:02:17.073142 2013] [:error] [pid 27318] [remote 10.34.47.236:59801]     raise errors.ACIError(info=info)
[Thu Dec 05 12:02:17.073243 2013] [:error] [pid 27318] [remote 10.34.47.236:59801] ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Ticket expired)

Regression in #3299; some more functionality from XML server needs to be shared with the JSON one.

master:

  • 6a2b709 rpcserver: Consolidate __call__ in xmlclient and jsonclient_kerb

Metadata Update from @mkosek:
- Issue assigned to pviktori
- Issue set to the milestone: FreeIPA 4.0 - 2014/01

7 years ago

Login to comment on this ticket.

Metadata