On 10/13/2017 05:35 PM, Kristian Petersen wrote:
Another thing I spotted in the UI: after a refresh of a page that loads whith the user appearing as if they were disabled the actions menu has extra options as shown in the image below.  You have both enable and disable, as well as two deletes.  

Does it happen only temporarily or does it stay in this state for the whole time? This is the way how the page is created and only then, after loading all information, unnecessary items are hidden or grayed out. If this is temporary and it disappears after while it is expected behavior and it can show that you have slow connection to your IPA master.

Could you please check steps which Rob wrote in previous mails?


On Fri, Oct 13, 2017 at 8:24 AM, Rob Crittenden <rcritten@redhat.com> wrote:
Rob Crittenden wrote:
Rob Crittenden via FreeIPA-users wrote:
Kristian Petersen via FreeIPA-users wrote:
Very possibly a bug if others are experiencing this as well.  I am
running IPA v4.5.0 on RHEL 7.4 are you running in a similar environment?

You might be able to figure out what is going on using something like
the Firefox dev console. In it you could see the JSON returned by the
IPA server, look for errors in the JS console, etc. to try to identify
where the issue is.

And/or file a bug, but since you have a reproducer the more data you can
gather to narrow the cause the easier it will be to fix.

rob

Kirstian gave me some javascript errors. We've seen other oddness in the
UI when cert_find() fails. Can you look in /var/log/httpd/error_log to
see if there is a traceback or a failure when you load the user in the UI?

And one more thing to check. I'm pretty sure under Network you can drill down into the details to see what data is returned by the server. Find the last user_show('youruser')

In the result there should be a long blog for attributelevelrights. Find userpassword in there and ensure the rights contains w, like:

u'userpassword': u'swo'


rob



On Thu, Oct 12, 2017 at 10:25 AM, Givaldo Lins <givaldolins@gmail.com
<mailto:givaldolins@gmail.com>> wrote:

    I noticed the same thing weeks ago and I am using the same
    workaround that Kristian. Might it be a bug on webui?

    —
    Givaldo Lins

    On Oct 12, 2017, at 9:05 AM, Kristian Petersen via FreeIPA-users
    <freeipa-users@lists.fedorahosted.org
    <mailto:freeipa-users@lists.fedorahosted.org>> wrote:

    When trying to reset a password for a user and I pull up the page
    for a specific user, it shows them as being disabled even if they
    aren't.  This causes the reset password option to be grayed-out
    among other things.  I verified the users weren't actually
    disabled by running ipa user-show <username> on a few of them.  If
    you do a user search in the WebUI or show all of the users in the
    system the status shows correctly on that page of the Web UI.
    This problem appears to happen across the replicas as well.

    After playing around with the Web UI for a bit I found that a
    refresh of the user's page gives back access to the Reset Password
    option, but just for that view.  If you go to another user the
    problem resurfaces.  I have confirmed this happens in both chrome
    and firefox running in both Windows or Linux.  The httpd logs show
    nothing there, /var/log/ipa logs aren't helpful either.

    IPA got some updates recently (which also appear to have broken
    pki-tomcatd), but I'm not sure if the two problems are related.

    --
    Kristian Petersen
    System Administrator
    Dept. of Chemistry and Biochemistry
    _______________________________________________
    FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
    <mailto:freeipa-users@lists.fedorahosted.org>
    To unsubscribe send an email to
    freeipa-users-leave@lists.fedorahosted.org
    <mailto:freeipa-users-leave@lists.fedorahosted.org>




--
Kristian Petersen
System Administrator
Dept. of Chemistry and Biochemistry


_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to
freeipa-users-leave@lists.fedorahosted.org

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to
freeipa-users-leave@lists.fedorahosted.org





--
Kristian Petersen
System Administrator
Dept. of Chemistry and Biochemistry

-- 
Pavel^3 Vomacka