Hello,
I have set up Koji Server using my network IP. I have also set up the Koji web.
But I'm still facing troubles in trying to access the Hub from command line.
[kojiadmin@fedora ~]$ koji call getLoggedInUser
2023-03-09 21:50:25,900 [ERROR] koji: (gssapi auth failed: requests.exceptions.SSLError:
HTTPSConnectionPool(host='192.168.44.128', port=443): Max retries exceeded with
url: /kojihub/ssllogin (Caused by SSLError(SSLError(1, '[SSL:
TLSV13_ALERT_CERTIFICATE_REQUIRED] tlsv13 alert certificate required
(_ssl.c:2546)'))))
Use following documentation to debug kerberos/gssapi auth issues.
https://docs.pagure.org/koji/kerberos_gssapi_debug/
2023-03-09 21:50:25,900 [ERROR] koji: GSSAPIAuthError: unable to obtain a session (gssapi
auth failed: requests.exceptions.SSLError:
HTTPSConnectionPool(host='192.168.44.128', port=443): Max retries exceeded with
url: /kojihub/ssllogin (Caused by SSLError(SSLError(1, '[SSL:
TLSV13_ALERT_CERTIFICATE_REQUIRED] tlsv13 alert certificate required
(_ssl.c:2546)'))))
Use following documentation to debug kerberos/gssapi auth issues.
https://docs.pagure.org/koji/kerberos_gssapi_debug/
facing this error, could you please explain it to me incase you're aware about it?
I've parallelly referred this Guide in addition to Pagure
https://www.saltbaek.dk/dokuwiki/doku.php?id=koji:installation:01:start
On the web-page, the UI is in place, but displays the following message
The web interface is having difficulty communicating with the main server. This most
likely indicates a network issue.
requests.exceptions.ConnectionError: HTTPConnectionPool(host='192.168.44.128',
port=80): Max retries exceeded with url: /kojihub (Caused by
NewConnectionError('<urllib3.connection.HTTPConnection object at
0x7f17d96f7910>: Failed to establish a new connection: [Errno 13] Permission
denied'))
It would be a great help if I could communicate with you regarding Koji Set up.
Thanks in advance !
It looks like your client (koji command line) isn't offering a client
cert to the server.
You need a cert for the client signed by your CA and configured in
/etc/koji.conf.
I'm sorry this setup is so confusing. ;(
kevin