RedHat 4/Fedora-DS - SSL Cert DB not readable?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Travis wrote:
> I agree with Graham's original idea - its almost as if the server is not
> looking in the proper location for the database.  Does anyone know where
> this is set?
>   
It looks for /opt/fedora-ds/alias/slapd-instancename-cert8.db - also 
grep -i nscert /opt/fedora-ds/slapd-instancename/config/dse.ldif
> Thanks,
>
> Travis
>
> On Tue, 2007-10-02 at 18:25 -0400, Travis wrote:
>   
>> Hi,
>>
>> No, as noted it is a completely new install, and I've already ddouble
>> checked permissions.
>>
>> Regardless - I've also tried chowning the entire tree to ldap (yes, this
>> is the user privs are being dropped to), as well as setting a+rw on the
>> entire /opt/fedora-ds tree. 
>>
>> Thanks,
>>
>> Travis
>>  
>>
>> On Tue, 2007-10-02 at 17:30 -0400, Rob Crittenden wrote:
>>     
>>> Travis wrote:
>>>       
>>>> Hi,
>>>>
>>>> We're preparing to upgrade from the initial DS release to 1.0.4-1 on our
>>>> RHEL4 servers.  In testing, we've hit a brick wall while trying to set
>>>> up SSL.  We can install the server just fine, but when clicking on
>>>> "Manage Certificates" in the console we get the following:
>>>>
>>>> could not open file slapd-$hostname-cert8.db
>>>>
>>>> We get the same type of error when trying to manage the admin server
>>>> certs.
>>>>
>>>> This is a completely fresh install, and we've double checked file
>>>> ownership, so permissions are not an issue.  After working on this for a
>>>> while, I tried installing the FC6 rpm on my FC6 desktop with the same
>>>> settings and JVM, which worked just fine...so its something specific
>>>> about the RHEL4 version or its dependencies.  
>>>>
>>>> I found one other post about this kind of issue (From Nov 2006 by Graham
>>>> Leggett), but I never saw a solution.  I have even tried initializing
>>>> the DBs by hand with certutil, but this does not appear to make a
>>>> difference.
>>>>
>>>> Any advice?
>>>>
>>>>         
>>> Permissions perhaps?
>>>
>>> rob
>>>
>>>       
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>> !DSPAM:10001,4702c57f55891133320659!
>>
>>     
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20071002/06c3ec5b/attachment.bin 


[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux