Issue

Attempting to log into the web interface results in error. "Login failed due to an unknown reason."

Steps to Reproduce

1. Navigate to web site
2. Attempt to log in with any credentials
3. Fail to login.

Actual behavior

When i attempt to log into the web interface with any account, I get "Login failed due to an unknown reason."

This web interface did work previously but not sure what the catalyst was that started this error.

Expected behavior

To be able to login to the web interface

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server

package freeipa-server is not installed
package freeipa-client is not installed
ipa-server-4.5.0-21.el7.centos.2.2.x86_64
ipa-client-4.5.0-21.el7.centos.2.2.x86_64
389-ds-base-1.3.6.1-21.el7_4.x86_64
pki-ca-10.4.1-13.el7_4.noarch
krb5-server-1.15.1-8.el7.x86_64

Additional info:

The httpd error log shows this:

[Thu Nov 30 16:06:20.316341 2017] [:error] [pid 10161] ipa: INFO: *** PROCESS START ***
[Thu Nov 30 16:38:53.440788 2017] [auth_gssapi:error] [pid 10165] [client 130.191.67.149:60456] NO AUTH DATA Client did not send any authentication headers, referer: https://some.server/ipa/ui/
[Thu Nov 30 16:38:53.488094 2017] [auth_gssapi:error] [pid 10165] [client 130.191.67.149:60456] NO AUTH DATA Client did not send any authentication headers, referer: https://some.server/ipa/ui/
[Thu Nov 30 16:38:58.354987 2017] [:error] [pid 10161] [remote 130.191.67.149:48] mod_wsgi (pid=10161): Exception occurred processing WSGI script '/usr/share/ipa/wsgi.py'.
[Thu Nov 30 16:38:58.355048 2017] [:error] [pid 10161] [remote 130.191.67.149:48] Traceback (most recent call last):
[Thu Nov 30 16:38:58.355081 2017] [:error] [pid 10161] [remote 130.191.67.149:48] File "/usr/share/ipa/wsgi.py", line 51, in application
[Thu Nov 30 16:38:58.355193 2017] [:error] [pid 10161] [remote 130.191.67.149:48] return api.Backend.wsgi_dispatch(environ, start_response)
[Thu Nov 30 16:38:58.355308 2017] [:error] [pid 10161] [remote 130.191.67.149:48] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 262, in call
[Thu Nov 30 16:38:58.363701 2017] [:error] [pid 10161] [remote 130.191.67.149:48] return self.route(environ, start_response)
[Thu Nov 30 16:38:58.363720 2017] [:error] [pid 10161] [remote 130.191.67.149:48] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 274, in route
[Thu Nov 30 16:38:58.363742 2017] [:error] [pid 10161] [remote 130.191.67.149:48] return app(environ, start_response)
[Thu Nov 30 16:38:58.363751 2017] [:error] [pid 10161] [remote 130.191.67.149:48] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 929, in call
[Thu Nov 30 16:38:58.363765 2017] [:error] [pid 10161] [remote 130.191.67.149:48] self.kinit(user_principal, password, ipa_ccache_name)
[Thu Nov 30 16:38:58.363776 2017] [:error] [pid 10161] [remote 130.191.67.149:48] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 965, in kinit
[Thu Nov 30 16:38:58.363790 2017] [:error] [pid 10161] [remote 130.191.67.149:48] pkinit_anchors=[paths.KDC_CERT, paths.KDC_CA_BUNDLE_PEM],
[Thu Nov 30 16:38:58.363800 2017] [:error] [pid 10161] [remote 130.191.67.149:48] File "/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 125, in kinit_armor
[Thu Nov 30 16:38:58.363868 2017] [:error] [pid 10161] [remote 130.191.67.149:48] run(args, env=env, raiseonerr=True, capture_error=True)
[Thu Nov 30 16:38:58.363882 2017] [:error] [pid 10161] [remote 130.191.67.149:48] File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 512, in run
[Thu Nov 30 16:38:58.364153 2017] [:error] [pid 10161] [remote 130.191.67.149:48] raise CalledProcessError(p.returncode, arg_string, str(output))
[Thu Nov 30 16:38:58.364210 2017] [:error] [pid 10161] [remote 130.191.67.149:48] CalledProcessError: Command '/usr/bin/kinit -n -c /var/run/ipa/ccaches/armor_10161 -X X509_anchors=FILE:/var/kerberos/krb5kdc/kdc.crt -X X509_anchors=FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem' returned non-zero exit status 1

when i try running kinit -n i get this notice:

[root@server httpd]# kinit -n
Password for WELLKNOWN/ANONYMOUS@SOME.DOMAIN:
kinit: Pre-authentication failed: Password read interrupted while getting initial credentials

[root@server httpd]# kinit admin
Password for admin@SOME.DOMAIN:
[root@server httpd]# klist
Ticket cache: KEYRING:persistent:0:0
Default principal: admin@SOME.DOMAIN

Valid starting Expires Service principal
11/30/2017 19:54:17 12/01/2017 19:53:32 krbtgt/SOME.DOMAIN@SOME.DOMAIN