Description of problem:

# ipa entitle-register
Username: myid
Password: 
Enter Password again to verify: 
ipa: ERROR: cannot connect to u'https://hp-dl140g2-01.rhts.eng.rdu.redhat.com/ipa/xml': Internal Server Error


/etc/httpd/errors_log :

[Mon Aug 22 15:06:22 2011] [error] ipa: INFO: Using basic authentication as: myid
[Mon Aug 22 15:06:22 2011] [error] ipa: WARNING: Error fetching supported resources, this UEPConnection is likely not usable:
[Mon Aug 22 15:06:22 2011] [error] ipa: ERROR: 
[Mon Aug 22 15:06:22 2011] [error] Traceback (most recent call last):
[Mon Aug 22 15:06:22 2011] [error]   File "/usr/lib/python2.6/site-packages/rhsm/connection.py", line 374, in _load_supported_resources
[Mon Aug 22 15:06:22 2011] [error]     resources_list = self.conn.request_get("/")
[Mon Aug 22 15:06:22 2011] [error]   File "/usr/lib/python2.6/site-packages/rhsm/connection.py", line 250, in request_get
[Mon Aug 22 15:06:22 2011] [error]     return self._request("GET", method)
[Mon Aug 22 15:06:22 2011] [error]   File "/usr/lib/python2.6/site-packages/rhsm/connection.py", line 189, in _request
[Mon Aug 22 15:06:22 2011] [error]     self._load_ca_certificates(context)
[Mon Aug 22 15:06:22 2011] [error]   File "/usr/lib/python2.6/site-packages/rhsm/connection.py", line 175, in _load_ca_certificates
[Mon Aug 22 15:06:22 2011] [error]     raise BadCertificateException(cert_path)
[Mon Aug 22 15:06:22 2011] [error] BadCertificateException
[Mon Aug 22 15:06:22 2011] [error] ipa: INFO: Connection Established: host: localhost, port: 8443, handler: /candlepin
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145] mod_wsgi (pid=8677): Exception occurred processing WSGI script '/usr/share/ipa/wsgi.py'.
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145] Traceback (most recent call last):
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/share/ipa/wsgi.py", line 48, in application
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     return api.Backend.session(environ, start_response)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 142, in __call__
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     return self.route(environ, start_response)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 154, in route
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     return app(environ, start_response)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 249, in __call__
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     response = self.wsgi_execute(environ)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 220, in wsgi_execute
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     result = self.Command[name](*args, **options)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 425, in __call__
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     ret = self.run(*args, **options)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 731, in run
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     return self.execute(*args, **options)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py", line 668, in execute
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     ldap, dn, entry_attrs, attrs_list, *keys, **options
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/entitle.py", line 529, in pre_callback
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     result = admin_cp.registerConsumer(name=api.env.realm, type="domain")
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/rhsm/connection.py", line 420, in registerConsumer
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     return self.conn.request_post(url, params)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/rhsm/connection.py", line 253, in request_post
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     return self._request("POST", method, params)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/rhsm/connection.py", line 189, in _request
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     self._load_ca_certificates(context)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]   File "/usr/lib/python2.6/site-packages/rhsm/connection.py", line 175, in _load_ca_certificates
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145]     raise BadCertificateException(cert_path)
[Mon Aug 22 15:06:22 2011] [error] [client 10.10.9.145] BadCertificateException


Version-Release number of selected component (if applicable):

# rpm -qi ipa-server
Name        : ipa-server                   Relocations: (not relocatable)
Version     : 2.1.0                             Vendor: Red Hat, Inc.
Release     : 1.el6                         Build Date: Mon 15 Aug 2011 06:26:27 PM EDT
Install Date: Mon 22 Aug 2011 02:25:15 PM EDT      Build Host: x86-005.build.bos.redhat.com
Group       : System Environment/Base       Source RPM: ipa-2.1.0-1.el6.src.rpm
Size        : 3296786                          License: GPLv3+
Signature   : (none)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://www.freeipa.org/
Summary     : The IPA authentication server
Description :
IPA is an integrated solution to provide centrally managed Identity (machine,
user, virtual machines, groups, authentication credentials), Policy
(configuration settings, access control information) and Audit (events,
logs, analysis thereof). If you are installing an IPA server you need
to install this package (in other words, most people should NOT install
this package).

# cat /etc/redhat-release 
Red Hat Enterprise Linux Server release 6.2 Beta (Santiago)

How reproducible:


Steps to Reproduce:
1. install ipa server
2. ipa entitle-register (make sure /etc/rhsm/rhsm.conf points to valid candlepin server
3.
  
Actual results:
ipa: ERROR: cannot connect to u'https://hp-dl140g2-01.rhts.eng.rdu.redhat.com/ipa/xml': Internal Server Error

Expected results:
successful registration

Additional info:

nothing to note from rhsm.log