From 84298201ae6ff300a08bc2202e4d9e5009e587f3 Mon Sep 17 00:00:00 2001 From: Michal Konecny Date: Apr 04 2025 11:01:58 +0000 Subject: [PATCH 1/2] Add troubleshooting guide for authentication issues This guide is certainly incomplete, but it could serve as starting point for discussion. --- diff --git a/modules/sysadmin_guide/pages/ipsilon.adoc b/modules/sysadmin_guide/pages/ipsilon.adoc index d32ddbd..56042e2 100644 --- a/modules/sysadmin_guide/pages/ipsilon.adoc +++ b/modules/sysadmin_guide/pages/ipsilon.adoc @@ -11,6 +11,7 @@ ** <<_openid_connect_scope_registration>> ** <<_generate_an_openid_connect_token>> ** <<_create_openid_connect_secrets_for_apps>> +* <<_troubleshooting>> == Contact Information @@ -213,3 +214,33 @@ variable name to the person who requested it. Finally, commit and push the changes to both files and run the `ipsilon.yml` playbook. + +== Troubleshooting + +Here is a guide one can follow when trying to troubleshoot authentication +issues within Fedora Infrastructure for users. + +. SSH to ipsilon machine ++ +---- +ssh ipsilon01 +---- ++ +. Find the entry in logs ++ +The logs are located in `/var/log/httpd/error_log`. You can find the entry either by +looking at the timestamps or looking for the `ipsilon_transaction_id`. ++ +If you don't see the error in the ipsilon logs you can continue to next step. ++ +. SSH to IPA machine (usually ipa01) ++ +---- +ssh ipa01 +---- ++ +. Look into the logs ++ +On ipa machine the logs could be found in `/var/log/httpd/error_log`, but it's hard to map +the ipsilon transaction to exact entry in the logs, so you can either map them together by time +or just looking for any error that seems related. From b52b32f2d93ebb7e65aa72998b9ca0ec72f1b80a Mon Sep 17 00:00:00 2001 From: Michal Konecny Date: Apr 04 2025 11:01:58 +0000 Subject: [PATCH 2/2] Minor improvements * Add note that this is only for admins * Mention the other machines that could be checked --- diff --git a/modules/sysadmin_guide/pages/ipsilon.adoc b/modules/sysadmin_guide/pages/ipsilon.adoc index 56042e2..907dc91 100644 --- a/modules/sysadmin_guide/pages/ipsilon.adoc +++ b/modules/sysadmin_guide/pages/ipsilon.adoc @@ -216,11 +216,16 @@ Finally, commit and push the changes to both files and run the `ipsilon.yml` playbook. == Troubleshooting - Here is a guide one can follow when trying to troubleshoot authentication issues within Fedora Infrastructure for users. -. SSH to ipsilon machine +[NOTE] +==== +This guide is meant for admins. If you don't have access to the machines bellow, +this guide will not help you. +==== + +. SSH to ipsilon machine (ipsilon01 or ipsilon02) + ---- ssh ipsilon01 @@ -233,7 +238,7 @@ looking at the timestamps or looking for the `ipsilon_transaction_id`. + If you don't see the error in the ipsilon logs you can continue to next step. + -. SSH to IPA machine (usually ipa01) +. SSH to IPA machine (usually ipa01, there is also ipa02 and ipa03 that can be checked) + ---- ssh ipa01