Richard Hesse wrote: > Nothing really informative in the admin server logs. Just the 500's being recorded: > > 10.69.66.9 - cn=directory manager [08/Oct/2007:17:51:56 +0000] "POST /admin-serv/tasks/configuration/SecurityOp HTTP/1.0" 500 620 > ps -ef|grep httpd ls -al /opt/fedora-ds/admin-serv/logs /opt/fedora-ds/admin-serv/config # do the following only after obscuring any sensitive data cat /opt/fedora-ds/shared/config/dbswitch.conf cat /opt/fedora-ds/admin-serv/config/adm.conf > -richard > > -----Original Message----- > From: fedora-directory-users-bounces at redhat.com [mailto:fedora-directory-users-bounces at redhat.com] On Behalf Of Richard Megginson > Sent: Monday, October 08, 2007 11:09 AM > To: General discussion list for the Fedora Directory server project. > Subject: Re: slapi search internal errors popping up in error log > > Richard Hesse wrote: > >> No, we're not using client certs but that doesn't preclude someone using their own certs. >> >> No certmap.conf in the instance directory and it looks like the shared one is stock: >> cat certmap.conf | grep -v "#" >> certmap default default >> >> The error from the configuration tab is just a generic 500. No additional text in the dialog nor in the logs. >> >> > Check the admin server access and error log - /opt/fedora-ds/admin-serv/logs > >> Alias directory: >> drwxr-xr-x 2 nobody nobody 4096 Oct 8 17:42 . >> drwxr-xr-x 15 root root 4096 Oct 8 17:42 .. >> -rwxr-xr-x 1 root nobody 347368 Oct 6 00:22 libnssckbi.so >> -rw------- 1 nobody nobody 16384 Oct 6 00:24 secmod.db >> -rw------- 1 nobody nobody 65536 Oct 6 00:22 slapd-fds-cert8.db >> -rw------- 1 nobody nobody 16384 Oct 6 00:22 slapd-fds-key3.db >> -r-------- 1 nobody nobody 41 Oct 6 00:22 slapd-fds-pin.txt >> >> >> Thanks in advance. >> >> -richard >> >> -----Original Message----- >> From: fedora-directory-users-bounces at redhat.com >> [mailto:fedora-directory-users-bounces at redhat.com] On Behalf Of >> Richard Megginson >> Sent: Saturday, October 06, 2007 1:46 PM >> To: General discussion list for the Fedora Directory server project. >> Subject: Re: slapi search internal errors >> popping up in error log >> >> Richard Hesse wrote: >> >> >>> [06/Oct/2007:00:24:51 +0000] - slapi_search_internal >>> ("CN=fds1.sv.powerset.com, OU=Domain Control Validated, >>> O=fds1.sv.powerset.com", subtree, objectclass=*) err 32 >>> >>> >>> >>> I'm guessing that this is cert related, but the TLS/SSL operations >>> are working fine. >>> >>> >>> >> Are you using client cert based authentication? >> >> cat /opt/fedora-ds/slapd-instance/config/certmap.conf >> /opt/fedora-ds/shared/config/certmap.conf >> >> >>> However, I noticed that I can no longer view the encryption tab for >>> this server in the console. >>> >>> >>> >> What error do you get when you try to view the encryption tab? >> >> ls -al /opt/fedora-ds/alias >> >> >>> Any ideas what this error means or how to fix it? >>> >>> >>> >>> Thanks. >>> >>> >>> >>> -richard >>> >>> --------------------------------------------------------------------- >>> - >>> -- >>> >>> -- >>> Fedora-directory-users mailing list >>> Fedora-directory-users at redhat.com >>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >>> >>> >>> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users at redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> > > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3245 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20071008/5d9d29ce/attachment.bin
