hi
I see in httpd/error_log entries about access, like:
Wed Jan 10 13:32:30.726295 2018] [:error] [pid 606202] ipa:
INFO: [jsonserver_kerb] admin(a)PRIVATE.xx.xx.PRIVATE.xx.xx.x:
host_find/1(None, version=u'2.228'): SUCCESS
[Wed Jan 10 13:32:37.798793 2018] [:warn] [pid 624924]
[client 10.5.6.17:54012] failed to set perms (3140) on file
(/var/run/ipa/ccaches/admin(a)PRIVATE.xx.xx.PRIVATE.xx.xx.x)!,
referer:
https://swir.priv.xx.xx.priv.xx.xx.x/ipa/xml
[Wed Jan 10 13:32:37.842082 2018] [:error] [pid 606201] ipa:
INFO: [jsonserver_session]
admin(a)PRIVATE.xx.xx.PRIVATE.xx.xx.x: dnszone_find/1(None,
version=u'2.228'): SUCCESS
[Wed Jan 10 13:32:45.967214 2018] [:warn] [pid 606204]
[client 10.5.6.17:54014] failed to set perms (3140) on file
(/var/run/ipa/ccaches/admin(a)PRIVATE.xx.xx.PRIVATE.xx.xx.x)!,
referer:
https://swir.priv.xx.xx.priv.xx.xx.x/ipa/xml
[Wed Jan 10 13:32:46.009797 2018] [:error] [pid 606202] ipa:
INFO: [jsonserver_session]
admin(a)PRIVATE.xx.xx.PRIVATE.xx.xx.x:
dnsrecord_find/1(u'5.10.in-addr.arpa.', None,
version=u'2.228'): NotFound
[Wed Jan 10 13:32:48.474571 2018] [:warn] [pid 606203]
[client 10.5.6.17:54016] failed to set perms (3140) on file
(/var/run/ipa/ccaches/admin(a)PRIVATE.xx.xx.PRIVATE.xx.xx.x)!,
referer:
https://swir.priv.xx.xx.priv.xx.xx.x/ipa/xml
[Wed Jan 10 13:32:48.528580 2018] [:error] [pid 606201] ipa:
INFO: [jsonserver_session]
admin(a)PRIVATE.xx.xx.PRIVATE.xx.xx.x:
dnsrecord_find/1(u'6.5.10.in-addr.arpa.', None,
version=u'2.228'): SUCCESS
[Wed Jan 10 13:36:39.475804 2018] [:warn] [pid 606208]
[client 10.5.6.17:54020] failed to set perms (3140) on file
(/var/run
Are above errors critical?
I've already changed:
chown .apache /var/lib/ipa-client/pki/*
chown .apache /etc/pki/ca-trust/source/ipa.p11-kit
Should these above be root only, as installer set them?