Re: RedHat 4/Fedora-DS - SSL Cert DB not readable?

[Richard Megginson <rmeggins@xxxxxxxxxx>]

Travis wrote:
> I agree with Graham's original idea - its almost as if the server is not
> looking in the proper location for the database.  Does anyone know where
> this is set?
>   
It looks for /opt/fedora-ds/alias/slapd-instancename-cert8.db - also 
grep -i nscert /opt/fedora-ds/slapd-instancename/config/dse.ldif
> Thanks,
>
> Travis
>
> On Tue, 2007-10-02 at 18:25 -0400, Travis wrote:
>   
> > Hi,
> >
> > No, as noted it is a completely new install, and I've already ddouble
> > checked permissions.
> >
> > Regardless - I've also tried chowning the entire tree to ldap (yes, this
> > is the user privs are being dropped to), as well as setting a+rw on the
> > entire /opt/fedora-ds tree. 
> >
> > Thanks,
> >
> > Travis
> >  
> >
> > On Tue, 2007-10-02 at 17:30 -0400, Rob Crittenden wrote:
> >     
> > > Travis wrote:
> > >       
> > > > Hi,
> > > >
> > > > We're preparing to upgrade from the initial DS release to 1.0.4-1 on our
> > > > RHEL4 servers.  In testing, we've hit a brick wall while trying to set
> > > > up SSL.  We can install the server just fine, but when clicking on
> > > > "Manage Certificates" in the console we get the following:
> > > >
> > > > could not open file slapd-$hostname-cert8.db
> > > >
> > > > We get the same type of error when trying to manage the admin server
> > > > certs.
> > > >
> > > > This is a completely fresh install, and we've double checked file
> > > > ownership, so permissions are not an issue.  After working on this for a
> > > > while, I tried installing the FC6 rpm on my FC6 desktop with the same
> > > > settings and JVM, which worked just fine...so its something specific
> > > > about the RHEL4 version or its dependencies.  
> > > >
> > > > I found one other post about this kind of issue (From Nov 2006 by Graham
> > > > Leggett), but I never saw a solution.  I have even tried initializing
> > > > the DBs by hand with certutil, but this does not appear to make a
> > > > difference.
> > > >
> > > > Any advice?
> > > >
> > > >         
> > > Permissions perhaps?
> > >
> > > rob
> > >
> > >       
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users@xxxxxxxxxx
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> >
> > !DSPAM:10001,4702c57f55891133320659!
> >
> >     
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

<<attachment: smime.p7s>>

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users