Description of problem:

I am trying to access the XMLRPC Server of FreeIPA via Rubies XMLRPC::Client.
This doesn't work, because the service itself sends out Content-Type: text/plain

which is wrong in terms of XMLRPC. Ruby itself has a strict sanity check in its XMLRPC Client, and throws an Exception when the returned Content-Type is not text/xml

Version-Release number of selected component (if applicable):
3.0.0-26.el6

How reproducible:

use XMLRPC::Client of Ruby 1.9 and some gssapi magic to send out the kerb authentication headers.


and use this code:

For example you can use this code:


require 'xmlrpc/client'
require 'base64'
require 'gssapi'

class FreeIPA
        attr_accessor :ipaurl
        attr_accessor :kerb_service

        def initialize(ipaurl,kerb_service='HTTP')
                uri=URI.parse ipaurl
                @ipaurl=ipaurl
                @kerb_service=kerb_service

                @ipa=XMLRPC::Client.new2(@ipaurl)
                @ipa.instance_variable_get(:@http).instance_variable_set(:@verify_mode, OpenSSL::SSL::VERIFY_NONE)

                @gsscli=GSSAPI::Simple.new(uri.host,@kerb_service)

                @token=@gsscli.init_context

                @ipa.http_header_extra={
                        'Authorization'=>"Negotiate #{Base64.strict_encode64(@token)}",
                        'Referer' => @ipaurl,
                        'Content-Type' => 'text/xml; charset=utf-8',
                        'Accept' => 'text/plain'
                }
        end

        def user_list
                user_list=@ipa.call('user_find')
                user_list
        end
end



a=FreeIPA.new('<your ipa server url i.e. http://ipaurl/ipa/xml>','HTTP')
puts a.user_list


Steps to Reproduce:
1. adjust the ipa url in the script
2. kinit <kerb user which has write to admin IPA>
3. start the script

Actual results:
ruby kerb.rb 
/usr/lib/ruby/1.9.1/xmlrpc/client.rb:557:in `do_rpc': Wrong content-type (received 'text/plain' but expected 'text/xml') (RuntimeError)
	from /usr/lib/ruby/1.9.1/xmlrpc/client.rb:420:in `call2'
	from /usr/lib/ruby/1.9.1/xmlrpc/client.rb:410:in `call'
	from kerb.rb:30:in `user_list'
	from kerb.rb:39:in `<main>'



Expected results:
ruby kerb.rb 
{"count"=>3, "truncated"=>false, "result"=>[{"dn"=>"uid=admin,cn=users,cn=accounts,dc=intern,dc=sourcecode,dc=de", "has_keytab"=>true, "uid"=>["admin"], "loginshell"=>["/bin/bash"], "uidnumber"=>["723200000"], "gidnumber"=>["723200000"], "has_password"=>true, "sn"=>["Administrator"], "homedirectory"=>["/home/admin"], "nsaccountlock"=>false}, {"dn"=>"uid=sadig,cn=users,cn=accounts,dc=intern,dc=sourcecode,dc=de", "has_keytab"=>true, "uid"=>["sadig"], "loginshell"=>["/bin/sh"], "uidnumber"=>["723200001"], "gidnumber"=>["723200001"], "has_password"=>true, "sn"=>["Adig"], "homedirectory"=>["/home/sadig"], "mail"=>["sadig@intern.sourcecode.de"], "givenname"=>["Stephan"], "nsaccountlock"=>false}, {"dn"=>"uid=shermann,cn=users,cn=accounts,dc=intern,dc=sourcecode,dc=de", "has_keytab"=>true, "uid"=>["shermann"], "loginshell"=>["/bin/sh"], "uidnumber"=>["723200004"], "gidnumber"=>["723200004"], "has_password"=>true, "sn"=>["Adig"], "homedirectory"=>["/home/shermann"], "mail"=>["shermann@intern.sourcecode.de"], "givenname"=>["Stephan"], "nsaccountlock"=>false}], "summary"=>"3 users matched"}


Additional info: