freeipa

#8163 "Internal Server Error" reported for minor issues implies IPA is broken [IdmHackfest2019]
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1782572

Description of problem:
Receiving "Internal Server Error" or "ipa: ERROR: cannot connect to 'any of the
configured servers'" from IPA when performing a non-critical task may imply to
customers that a fully-functional IPA instance is somehow broken
Version-Release number of selected component (if applicable):
RHEL 8.1 / IPA 4.8
How reproducible:
Consistent
Steps to Reproduce:
1. Set up IPA and Establish Trust with an AD domain
2. kinit as an AD user, but do not have them in the "Default Trust View"
3. Perform an IPA command, like `ipa ping`
Actual results:
"Internal Server Error" or "cannot connect to 'any of the configured servers'"
message is displayed
Expected results:
Report a less-general, less-alarming error message like "you do not have
permissions to run this command" so customers know IPA is still working as
expected
Additional info:
1) At one point at IdM Hackfest 2019, we received "Internal Server Error" on a
fresh install when performing `ipa ping` with an unprivileged user, but was
unable to reproduce this afterwards.
2) Received another misleading error:
   [root@replica ~]# kinit Administrator@WIN2016.TEST
   Password for Administrator@WIN2016.TEST:
   [root@replica ~]# id Administrator@WIN2016.TEST
   id: ‘Administrator@WIN2016.TEST’: no such user
   [root@replica ~]# ipa ping
   ipa: ERROR: cannot connect to 'any of the configured servers':
https://replica.ipa.test/ipa/json, https://master.ipa.test/ipa/json

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1782572

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4110

master:

  • e2d69380fbae6dab244fce3fd5afe5fdc28a2663 AD user without override receive InternalServerError with API

ipa-4-8:

  • 4db18be5467c0b8f7633b281c724f469f907e573 AD user without override receive InternalServerError with API

ipa-4-7:

  • f9f822ac10c0a5fffca906d5f5412c8d35adcc18 AD user without override receive InternalServerError with API

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • a02df530a6b4b5f5f6f9661da33aa2fb0cd47211 ipatests:Test if proper error thrown when AD user tries to run IPA commands

ipa-4-8:

  • 90eef2f84d3ad61894a1656c529000072e6cb036 ipatests:Test if proper error thrown when AD user tries to run IPA commands
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.