Jonathan Vaughn wrote:
System time appears to be fine.
Here's the httpd access log (nothing in error log):
10.10.255.101 - - [18/May/2018:15:26:19 -0500] "GET /ipa/session/cookie
HTTP/1.1" 301 260 "-" "python-requests/2.18.4"
10.10.255.101 - admin(a)CREATUITY.INTERNAL [18/May/2018:15:26:20 -0500]
"GET /ipa/session/cookie HTTP/1.1" 200 -
10.10.11.3 - - [18/May/2018:15:26:18 -0500] "POST
/ipa/session/login_password HTTP/1.1" 200 20
10.10.11.3 - admin(a)CREATUITY.INTERNAL [18/May/2018:15:26:20 -0500] "POST
/ipa/session/json HTTP/1.1" 401 -
10.10.11.3 - admin(a)CREATUITY.INTERNAL [18/May/2018:15:26:20 -0500] "GET
/ipa/session/login_kerberos?_=1526674892374 HTTP/1.1" 401 -
You'll want to look at the error log for more details. For even more
output create /etc/ipa/server.conf with the contents:
[global]
debug = True
and restart httpd
rob
>
> On Fri, May 18, 2018 at 3:23 PM, Jonathan Vaughn <jonathan(a)creatuity.com
> <mailto:jonathan@creatuity.com>> wrote:
>
> Actually - may have spoke too soon. I thought I'd signed in to the
> UI but I was actually in another server's UI. When I try to log in
> it says that my login has expired... so progress but something else
> is busted.
>
> On Fri, May 18, 2018 at 3:20 PM, Jonathan Vaughn
> <jonathan(a)creatuity.com <mailto:jonathan@creatuity.com>> wrote:
>
> Looks like replica install finished just fine, and I can access
> the the web UI on it. No obvious problems.
>
> So it would appear that code change fixed 389DS for ARM.
>
> I'm not running the Dogtag CA on the Pi, just on the non-Pi
> servers, otherwise would need to probably adjust the startup
> timeout for it so that the install script didn't give up waiting
> on it. When I was first trying to play with this I tried
> installing the first replica/master on the Pi, and ran into the
> Dogtag timeout problem. Even installing Oracle Java instead of
> the OpenJDK version of Java didn't solve it, because somehow it
> always picks the OpenJDK java instead of oracle even if I change
> the alternatives setting to default to the Oracle one...
>
> But as far as I can tell otherwise, everything is working as
> expected.