Cloned from upstream: https://pagure.io/freeipa/issue/6748
Steps to reproduce:
* ipa-server-install --uninstall
* kinit admin
* ipa ping
[root@vm-058-129 ~]# ipa ping
ipa: ERROR: No valid Negotiate header in server response
httpd error log:
[Thu Mar 09 18:43:50.024163 2017] [auth_gssapi:error] [pid 77550] [client 2620:52:0:224e:21a:4aff:fe23:1211:42306] gss_acquire_cred[_from]() failed to get server creds: [Unspecified GSS failure. Minor code may provide more information ( SPNEGO cannot find mechanisms to negotiate)], referer: https://vm-058-129.abc.idm.lab.eng.brq.redhat.com/ipa/xml
master (maybe in rebase):
ee6d031a6a0939c1f51a874b1f8f9b19ec727203 Backup KDC certificate pair
2612c092dd797c9c8f772c785aae1f152f06847d Backup ipa-specific httpd unit-file
59342a7f6fffe2aaf0b8ce4e10bb41444d8fa25f Backup ipa-specific httpd unit-file
Not setting POST, Web UI still doesn't work after restore.
Created attachment 1285339 [details]
Verified on ipa-server-4.5.0-14.el7.x86_64
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.