Project

General

Profile

ERF12-5287 » History » Version 7

Stephen Benjamin, 07/13/2015 12:18 PM

1 3 Stephen Benjamin
h1. ERF12-5287: Unable to create realm entry
2
3 1 Stephen Benjamin
4
Possible solutions to this issue:
5
6 6 Stephen Benjamin
h2. Upgraded IPA 3.x to 4.x
7
8 7 Stephen Benjamin
If you upgraded IPA from 3 to 4, the permissions system has changed and the custom permissions foreman needs are not migrated correctly.  You can verify this is the problem by looking at /var/log/httpd/*.log for permissions errors.
9 6 Stephen Benjamin
10
Re-run `foreman-prepare-realm` from a server with the IPA version *4* client tools installed (such as the FreeIPA server itself).
11
12
13 2 Stephen Benjamin
h2. Expired Keytab
14
15
Do you see an error like this in /var/log/foreman-proxy/proxy.log?
16
17
<pre>
18
ERROR -- : Failed to initailize credentials cache from keytab: krb5_get_init_creds_keytab: Decrypt integrity check failed
19
</pre>
20
21 4 Tommy McNeely
Your Keytab may be expired. The keytab expiration follows your password expiration policies.
22 2 Stephen Benjamin
23
You can get a new one by:
24
25
<pre>
26
# kinit admin@EXAMPLE.COM (or other suitable IPA admin)
27
# ipa-getkeytab -s ipa01.example.com -p realm-proxy@EXAMPLE.COM -k /etc/foreman-proxy/freeipa.keytab
28 4 Tommy McNeely
# chown foreman-proxy:foreman-proxy /etc/foreman-proxy/freeipa.keytab
29 2 Stephen Benjamin
</pre>
30
31 1 Stephen Benjamin
32
h2. Wrong Size Error
33
34
Do you see an error like this in /var/log/foreman-proxy/proxy.log?
35
36
<pre>
37
E, [2014-11-03T15:23:02.715791 #21273] ERROR -- : Wrong size. Was 307, should be 191
38
</pre>
39
40
This is due to a bug in Ruby: 
41
  https://bugs.ruby-lang.org/issues/8182
42
43 5 Dominic Cleal
This has been fixed in RHEL 7.1 + rebuilds, please run @yum update ruby@.  The relevant bugzilla
44 1 Stephen Benjamin
is: https://bugzilla.redhat.com/show_bug.cgi?id=1071187
45
46 5 Dominic Cleal
On 7.0, you can temporarily work around the problem by commenting these out on lines 505-506 in
47 1 Stephen Benjamin
/usr/share/ruby/xmlrpc/client.rb:
48
49
<pre>
50
      #elsif expected != "<unknown>" and expected.to_i != data.bytesize and resp["Transfer-Encoding"].nil?
51
            #  raise "Wrong size. Was #{data.bytesize}, should be
52
            #  #{expected}"
53
</pre>