On to, 10 joulu 2020, Lachlan Musicman via FreeIPA-users wrote:
Hola,
When I browse to the webUI for IDM, I'm getting nothing.
The http error log is showing:
[Thu Dec 10 15:30:44.429646 2020] [wsgi:error] [pid 1773:tid 139794280646400] [remote
172.26.33.93:42908] ipa: INFO: [jsonserver_i18n_messages] UNKNOWN:
i18n_messages(version='2.239'): SUCCESS
[Thu Dec 10 15:32:28.088766 2020] [wsgi:error] [pid 1773:tid 139794280646400] [remote
172.26.33.93:42932] ipa: INFO: [jsonserver_i18n_messages] UNKNOWN:
i18n_messages(version='2.239'): SUCCESS
[Thu Dec 10 15:32:39.316974 2020] [wsgi:error] [pid 1773:tid 139794280646400] [remote
172.26.33.93:42932] ipa: INFO: [jsonserver_i18n_messages] UNKNOWN:
i18n_messages(version='2.239'): SUCCESS
[Thu Dec 10 15:32:53.657573 2020] [wsgi:error] [pid 1774:tid 139794280646400] [remote
172.26.33.93:42932] ipa: INFO: [jsonserver_i18n_messages] UNKNOWN:
i18n_messages(version='2.239'): SUCCESS
The http access log is more interesting:
172.26.33.93 - - [10/Dec/2020:15:32:53 +1100] "GET
/ipa/ui/js/plugins/idoverride-memberof/idoverride-memberof.js?40807 HTTP/1.1" 404 19
When I go hunting, I see this:
[root@idm httpd]# ls -la /usr/share/ipa/ui/js/plugins/idoverride-memberof/
total 0
drwxr-xr-x. 2 root root 6 Dec 10 13:36 .
drwxr-xr-x. 3 root root 33 Oct 9 00:45 ..
I see there is a package available;
[root@idm httpd]# dnf info ipa-idoverride-memberof-plugin --all
...
Available Packages
Name : ipa-idoverride-memberof-plugin
Version : 0.0.4
Release : 6.module+el8+2555+b334d87b
Architecture : x86_64
Size : 31 k
Source : ipa-idoverride-memberof-0.0.4-6.module+el8+2555+b334d87b.src.rpm
But I see that it's already installed:
Package ipa-server-trust-ad-4.8.7-13.module+el8.3.0+8376+0bba7131.x86_64 is already
installed.
I updated from RHEL 8.2 to 8.3 this AM. It was working last week with 8.2. Is there meant
to be an idoverride-memberof.js file?
It is a known bug. A workaround is to remove ipa-idoverride-memberof
package and remove /usr/share/ipa/ui/js/plugins/idoverride-memberof
folder.
We merged the functionality of this plugin into the main code base. RPM
package ipa-idoverride-memberof-plugin was obsoleted and should have
been removed. However, the folder in which .js file is installed was not
owned by the package and at removal it wasn't removed. This played bad
with IPA's Web UI plugins' loading code which assumed that if the
directory existed, the .js file by the same name existed in it, without
checks.
The fix will be in one of z-stream updates early next year (there are
more fixes coming and pulled together for testing).
So just remove the package, delete the folder and restart httpd. You may
want to remove cookies in the browser too.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland