Did the "yum upgrade" followed by "sudo ipa-server-upgrade" followed
by
a reboot on two different IPA servers
Now the webUI fails on both. The webUI error is:
Cannot connect to the server, please check API accesibility
(certificate, API, proxy, etc.)
httpd error log says this:
[Fri Nov 17 14:08:38.914506 2017] [:error] [pid 2748] ipa: INFO: ***
PROCESS START ***
[Fri Nov 17 14:08:39.002769 2017] [:error] [pid 2747] ipa: INFO: ***
PROCESS START ***
[Fri Nov 17 14:11:42.214284 2017] [auth_gssapi:error] [pid 2749] [client
172.29.128.180:54933] NO AUTH DATA Client did not send any
authentication headers, referer:
https://usaeilidmp002.xxx.org/ipa/ui/
[Fri Nov 17 14:11:42.304960 2017] [auth_gssapi:error] [pid 2749] [client
172.29.128.180:54933] GSS ERROR In Negotiate Auth:
gss_accept_sec_context() failed: [An unsupported mechanism was requested
(Unknown error)], referer:
https://usaeilidmp002.xxx.org/ipa/ui/
[root@usaeilidmp002 httpd]#
Browser is Chrome - same as I've always been using to access the admin UI
Any tips or guidance? May have to restore from backup
Chris