Under specific circumstances, which seem to be something around: - using IPA under Internet Exploder - machine part of AD (Windows-only network, not part of IPA) - with user entering login/password via Krb5Passwd (not negotiate) - leaving the window untouched for a couple of minutes a JSON error pops up (see screenshot). The server is not under any load, network throughput is fine, and repeating the action eventually leads to the action being executed. /var/log/httpd/error.log gives me these hints: [Thu Jun 14 16:04:57 2012] [error] ipa: ERROR: release_ipa_ccache: ccache_name (FILE:/tmp/krb5cc_apache_q4B5Vw) != KRB5CCNAME environment variable (FILE:/tmp/krb5cc_apach [Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: i18n_messages(): SUCCESS [Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: user_find(None, whoami=True, all=True): SUCCESS [Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: env(None): SUCCESS [Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: dns_is_enabled(): SUCCESS [Thu Jun 14 16:04:58 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch(({u'params': [[], {}], u'method': u'i18n_messages'}, {u'params': [[], {u'all': True, u'whoami [Thu Jun 14 16:05:00 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: JSONError [Thu Jun 14 16:05:00 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: json_metadata(None, None, object=u'all'): SUCCESS [Thu Jun 14 16:05:06 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: json_metadata(None, None, command=u'all'): SUCCESS [Thu Jun 14 16:05:08 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: user_find(None, sizelimit=0, pkey_only=True): SUCCESS [Thu Jun 14 16:05:09 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: user_show(u'admin', all=True): SUCCESS [Thu Jun 14 16:05:09 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch: user_show(u'bztest', all=True): SUCCESS etc .... [Thu Jun 14 16:05:09 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: batch(({u'params': [[u'myuser'], {u'all': True}], u'method': u'user_show'}, {u'params': [[u'adm [Thu Jun 14 16:06:02 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: JSONError [Thu Jun 14 16:06:05 2012] [error] ipa: INFO: user_obscured@DOMAIN_OBSCURED: JSONError Given this is not repruducible with Firefox I blame IE for doing something messy with AD. I still have the logs handy, if you point me to the right direction before they (log)rotate to log heaven, I'll be glad to paste them here. ipa-2.2.0-14.el6
Created attachment 591957 [details] screenshot
One more thing perhaps related: the action leading up to this is entering part of the name into the search box and hitting enter.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/2855
This issue is not reproducible any more with the latest bits. Moving to QE to retest.
Created attachment 689881 [details] verified in ipa-server-3.0.0-22.el6.x86_64 - using IPA under Internet Exploder - machine part of AD (Windows-only network, not part of IPA) - with user entering login/password via Krb5Passwd (not negotiate) - leaving the window untouched for a couple of minutes no Sporadic JSON errors came out
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-0528.html