Cause: Identity Management Web UI was not entirely compatible with Microsoft Internet Explorer browser.
Consequence: Administrators using Microsoft Internet Explorer may have experience glitches that may limit user experience when working with the Identity Management administration interface.
Fix: Make Identity Management Web UI compatible with Microsoft Internet Explorer browser of version 9 or later.
Result: Administrators using Microsoft Internet Explorer browser should no longer experience glitches limiting their user experience when working with the Web UI.
Under specific circumstances, which seem to be something around:
- using IPA under Internet Exploder
- machine part of AD (Windows-only network, not part of IPA)
- with user entering login/password via Krb5Passwd (not negotiate)
- leaving the window untouched for a couple of minutes
a JSON error pops up (see screenshot). The server is not under any load, network throughput is fine, and repeating the action eventually leads to the action being executed.
/var/log/httpd/error.log gives me these hints:
[Thu Jun 14 16:04:57 2012] [error] ipa: ERROR: release_ipa_ccache: ccache_name (FILE:/tmp/krb5cc_apache_q4B5Vw) != KRB5CCNAME environment variable (FILE:/tmp/krb5cc_apach
[Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: i18n_messages(): SUCCESS
[Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: user_find(None, whoami=True, all=True): SUCCESS
[Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: env(None): SUCCESS
[Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: dns_is_enabled(): SUCCESS
[Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch(({u'params': [[], {}], u'method': u'i18n_messages'}, {u'params': [[], {u'all': True, u'whoami
[Thu Jun 14 16:05:00 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: JSONError
[Thu Jun 14 16:05:00 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: json_metadata(None, None, object=u'all'): SUCCESS
[Thu Jun 14 16:05:06 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: json_metadata(None, None, command=u'all'): SUCCESS
[Thu Jun 14 16:05:08 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: user_find(None, sizelimit=0, pkey_only=True): SUCCESS
[Thu Jun 14 16:05:09 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: user_show(u'admin', all=True): SUCCESS
[Thu Jun 14 16:05:09 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: user_show(u'bztest', all=True): SUCCESS
etc
....
[Thu Jun 14 16:05:09 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch(({u'params': [[u'myuser'], {u'all': True}], u'method': u'user_show'}, {u'params': [[u'adm
[Thu Jun 14 16:06:02 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: JSONError
[Thu Jun 14 16:06:05 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: JSONError
Given this is not repruducible with Firefox I blame IE for doing something messy with AD.
I still have the logs handy, if you point me to the right direction before they (log)rotate to log heaven, I'll be glad to paste them here.
ipa-2.2.0-14.el6
Created attachment 689881[details]
verified in ipa-server-3.0.0-22.el6.x86_64
- using IPA under Internet Exploder
- machine part of AD (Windows-only network, not part of IPA)
- with user entering login/password via Krb5Passwd (not negotiate)
- leaving the window untouched for a couple of minutes
no Sporadic JSON errors came out
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
http://rhn.redhat.com/errata/RHSA-2013-0528.html