3:05 a.m.
Hi,
I am new to this list and hope you can help me out.
Starting from the FileBasedPublisher.java I created a class called “MailBasedPublisher”,
compiled it and added it to the tomcat server running the dogtag CS.
The class has been added in Publisher Registration and seems to be properly recognized.
The configuration of the parameters and adding the publisher to a rule combined with the
"NoMap" mapper did not show any problems.
To check whether the Publisher is called I added
CMS.debug("MailBasedPublisher: publish");
to the publish function. However, neither the mails are sent, nor the message is
generated, when I try to publish certificates. Versions tried are
pki-ca-9.0.20-1.fc16.noarch and pki-ca-1.3.6-1.el5.
Am I missing something? Can you help me or give some advice how to debug this issue.
Sending mails is just a test to get familiar with the system, I am trying to write code to
publish certificates to sql server in the future.
best regards, Klaus Wagner
ps. here is the publish configuration from CS.cfg and log output:
ca.publish.createOwnDNEntry=false
ca.publish.enable=true
ca.publish.ldappublish.enable=false
ca.publish.mapper.impl.LdapCaSimpleMap.class=com.netscape.cms.publish.mappers.LdapCaSimpleMap
ca.publish.mapper.impl.LdapDNCompsMap.class=com.netscape.cms.publish.mappers.LdapCertCompsMap
ca.publish.mapper.impl.LdapDNExactMap.class=com.netscape.cms.publish.mappers.LdapCertExactMap
ca.publish.mapper.impl.LdapEnhancedMap.class=com.netscape.cms.publish.mappers.LdapEnhancedMap
ca.publish.mapper.impl.LdapSimpleMap.class=com.netscape.cms.publish.mappers.LdapSimpleMap
ca.publish.mapper.impl.LdapSubjAttrMap.class=com.netscape.cms.publish.mappers.LdapCertSubjMap
ca.publish.mapper.impl.NoMap.class=com.netscape.cms.publish.mappers.NoMap
ca.publish.mapper.instance.LdapCaCertMap.createCAEntry=true
ca.publish.mapper.instance.LdapCaCertMap.dnPattern=UID=$subj.cn,OU=people,O=$subj.o
ca.publish.mapper.instance.LdapCaCertMap.pluginName=LdapCaSimpleMap
ca.publish.mapper.instance.LdapCrlMap.createCAEntry=true
ca.publish.mapper.instance.LdapCrlMap.dnPattern=UID=$subj.cn,OU=people,O=$subj.o
ca.publish.mapper.instance.LdapCrlMap.pluginName=LdapCaSimpleMap
ca.publish.mapper.instance.LdapUserCertMap.dnPattern=UID=$subj.UID,OU=people,O=$subj.o
ca.publish.mapper.instance.LdapUserCertMap.pluginName=LdapSimpleMap
ca.publish.mapper.instance.NoMap.pluginName=NoMap
ca.publish.publisher.impl.FileBasedPublisher.class=com.netscape.cms.publish.publishers.FileBasedPublisher
ca.publish.publisher.impl.LdapCaCertPublisher.class=com.netscape.cms.publish.publishers.LdapCaCertPublisher
ca.publish.publisher.impl.LdapCertificatePairPublisher.class=com.netscape.cms.publish.publishers.LdapCertificatePairPublisher
ca.publish.publisher.impl.LdapCrlPublisher.class=com.netscape.cms.publish.publishers.LdapCrlPublisher
ca.publish.publisher.impl.LdapDeltaCrlPublisher.class=com.netscape.cms.publish.publishers.LdapCrlPublisher
ca.publish.publisher.impl.LdapUserCertPublisher.class=com.netscape.cms.publish.publishers.LdapUserCertPublisher
ca.publish.publisher.impl.MailBasedPublisher.class=com.netscape.cms.publish.publishers.MailBasedPublisher
ca.publish.publisher.impl.OCSPPublisher.class=com.netscape.cms.publish.publishers.OCSPPublisher
ca.publish.publisher.instance.LdapCaCertPublisher.caCertAttr=caCertificate;binary
ca.publish.publisher.instance.LdapCaCertPublisher.caObjectClass=pkiCA
ca.publish.publisher.instance.LdapCaCertPublisher.pluginName=LdapCaCertPublisher
ca.publish.publisher.instance.LdapCrlPublisher.crlAttr=certificateRevocationList;binary
ca.publish.publisher.instance.LdapCrlPublisher.crlObjectClass=pkiCA
ca.publish.publisher.instance.LdapCrlPublisher.pluginName=LdapCrlPublisher
ca.publish.publisher.instance.LdapCrossCertPairPublisher.caObjectClass=pkiCA
ca.publish.publisher.instance.LdapCrossCertPairPublisher.crossCertPairAttr=crossCertificatePair;binary
ca.publish.publisher.instance.LdapCrossCertPairPublisher.pluginName=LdapCertificatePairPublisher
ca.publish.publisher.instance.LdapDeltaCrlPublisher.crlAttr=deltaRevocationList;binary
ca.publish.publisher.instance.LdapDeltaCrlPublisher.crlObjectClass=pkiCA,deltaCRL
ca.publish.publisher.instance.LdapDeltaCrlPublisher.pluginName=LdapDeltaCrlPublisher
ca.publish.publisher.instance.LdapUserCertPublisher.certAttr=userCertificate;binary
ca.publish.publisher.instance.LdapUserCertPublisher.pluginName=LdapUserCertPublisher
ca.publish.publisher.instance.MailCertPublisher.mailfromaddress=s6690@morbo.user.lan.at<mailto:ca.publish.publisher.instance.MailCertPublisher.mailfromaddress=s6690@morbo.user.lan.at>
ca.publish.publisher.instance.MailCertPublisher.mailsmtpaddress=172.0.0.1
ca.publish.publisher.instance.MailCertPublisher.mailtoaddress=klaus.wagner@s-itsolutions.at<mailto:ca.publish.publisher.instance.MailCertPublisher.mailtoaddress=klaus.wagner@s-itsolutions.at>
ca.publish.publisher.instance.MailCertPublisher.pluginName=MailBasedPublisher
ca.publish.queue.enable=true
ca.publish.queue.maxNumberOfThreads=3
ca.publish.queue.pageSize=40
ca.publish.queue.priorityLevel=0
ca.publish.queue.saveStatus=200
ca.publish.rule.impl.Rule.class=com.netscape.cmscore.ldap.LdapRule
ca.publish.rule.instance.LdapCaCertRule.enable=false
ca.publish.rule.instance.LdapCaCertRule.mapper=LdapCaCertMap
ca.publish.rule.instance.LdapCaCertRule.pluginName=Rule
ca.publish.rule.instance.LdapCaCertRule.predicate=
ca.publish.rule.instance.LdapCaCertRule.publisher=LdapCaCertPublisher
ca.publish.rule.instance.LdapCaCertRule.type=cacert
ca.publish.rule.instance.LdapCrlRule.enable=false
ca.publish.rule.instance.LdapCrlRule.mapper=LdapCrlMap
ca.publish.rule.instance.LdapCrlRule.pluginName=Rule
ca.publish.rule.instance.LdapCrlRule.predicate=
ca.publish.rule.instance.LdapCrlRule.publisher=LdapCrlPublisher
ca.publish.rule.instance.LdapCrlRule.type=crl
ca.publish.rule.instance.LdapUserCertRule.enable=false
ca.publish.rule.instance.LdapUserCertRule.mapper=LdapUserCertMap
ca.publish.rule.instance.LdapUserCertRule.pluginName=Rule
ca.publish.rule.instance.LdapUserCertRule.predicate=
ca.publish.rule.instance.LdapUserCertRule.publisher=LdapUserCertPublisher
ca.publish.rule.instance.LdapUserCertRule.type=certs
ca.publish.rule.instance.LdapXCertRule.enable=false
ca.publish.rule.instance.LdapXCertRule.mapper=LdapCaCertMap
ca.publish.rule.instance.LdapXCertRule.pluginName=Rule
ca.publish.rule.instance.LdapXCertRule.predicate=
ca.publish.rule.instance.LdapXCertRule.publisher=LdapCrossCertPairPublisher
ca.publish.rule.instance.LdapXCertRule.type=xcert
ca.publish.rule.instance.MailCertRule.enable=true
ca.publish.rule.instance.MailCertRule.mapper=NoMap
ca.publish.rule.instance.MailCertRule.pluginName=Rule
ca.publish.rule.instance.MailCertRule.predicate=
ca.publish.rule.instance.MailCertRule.publisher=MailCertPublisher
ca.publish.rule.instance.MailCertRule.type=certs
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet:service() uri = /ca/agent/ca/updateDir
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param
name='updateValid' value='yes'
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param
name='expiredFrom' value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param name='revokedTo'
value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param
name='revokedFrom' value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param name='expiredTo'
value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param name='validTo'
value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param name='validFrom'
value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: caUpdateDir start to service.
[09/Jul/2012:19:56:16][http-9443-2]: IP: 10.18.49.69
[09/Jul/2012:19:56:16][http-9443-2]: AuthMgrName: certUserDBAuthMgr
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: retrieving SSL certificate
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: certUID=CN=Klaus CA Administrator of
Instance
pki-ca,UID=admin,E=klaus.wagner@s-itsolutions.at,O=UserLan<mailto:E=klaus.wagner@s-itsolutions.at,O=UserLan>
Domain
[09/Jul/2012:19:56:16][http-9443-2]: CertUserDBAuth: started
[09/Jul/2012:19:56:16][http-9443-2]: CertUserDBAuth: Retrieving client certificate
[09/Jul/2012:19:56:16][http-9443-2]: CertUserDBAuth: Got client certificate
[09/Jul/2012:19:56:16][http-9443-2]: Authentication: client certificate found
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: Authentication: mapped certificate to user
[09/Jul/2012:19:56:16][http-9443-2]: authenticated
uid=admin,ou=people,dc=morbo.user.lan.at-pki-ca
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: userid=admin
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: in auditSubjectID
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: auditSubjectID auditContext
{locale=en_US,EN;Q=0.5, userid=admin, ipAddress=10.18.49.69,
authManagerId=certUserDBAuthMgr}
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet auditSubjectID: subjectID: admin
[09/Jul/2012:19:56:16][http-9443-2]: SignedAuditEventFactory: create()
message=[AuditEvent=AUTH_SUCCESS][SubjectID=admin][Outcome=Success][AuthMgr=certUserDBAuthMgr]
authentication success
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: in auditSubjectID
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: auditSubjectID auditContext
{locale=en_US,EN;Q=0.5, userid=admin, ipAddress=10.18.49.69,
authManagerId=certUserDBAuthMgr}
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet auditSubjectID: subjectID: admin
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: in auditGroupID
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: auditGroupID auditContext
{locale=en_US,EN;Q=0.5, userid=admin, ipAddress=10.18.49.69,
authManagerId=certUserDBAuthMgr}
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet auditGroupID: groupID: null
[09/Jul/2012:19:56:16][http-9443-2]: checkACLS(): ACLEntry expressions=
group="Certificate Manager Agents"
[09/Jul/2012:19:56:16][http-9443-2]: evaluating expressions: group="Certificate
Manager Agents"
[09/Jul/2012:19:56:16][http-9443-2]: GroupAccessEvaluator: evaluate: uid=admin
value="Certificate Manager Agents"
[09/Jul/2012:19:56:16][http-9443-2]: GroupAccessEvaluator: evaluate: no gid in authToken
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: UGSubsystem.isMemberOf() using new lookup code
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: authorization search base: cn=Certificate Manager
Agents,ou=groups,dc=morbo.user.lan.at-pki-ca
[09/Jul/2012:19:56:16][http-9443-2]: authorization search filter:
(uniquemember=uid=admin,ou=people,dc=morbo.user.lan.at-pki-ca)
[09/Jul/2012:19:56:16][http-9443-2]: authorization result: true
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: evaluated expression: group="Certificate Manager
Agents" to be true
[09/Jul/2012:19:56:16][http-9443-2]: DirAclAuthz: authorization passed
[09/Jul/2012:19:56:16][http-9443-2]: SignedAuditEventFactory: create()
message=[AuditEvent=AUTHZ_SUCCESS][SubjectID=admin][Outcome=Success][aclResource=certServer.ca.directory][Op=update]
authorization success
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: SignedAuditEventFactory: create()
message=[AuditEvent=ROLE_ASSUME][SubjectID=admin][Outcome=Success][Role=Certificate
Manager Agents, Administrators, Security Domain Administrators, Enterprise CA
Administrators, Enterprise KRA Administrators, Enterprise OCSP Administrators, Enterprise
TKS Administrators, Enterprise RA Administrators, Enterprise TPS Administrators] assume
privileged role
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 1
[09/Jul/2012:19:56:16][http-9443-2]: In findCertRecordsInList with Jumpto 0
[09/Jul/2012:19:56:16][http-9443-2]: In DBVirtualList filter attrs startFrom sortKey
pageSize filter: (certstatus=VALID) attrs: null pageSize 40 startFrom 010
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: getEntries returning 7
[09/Jul/2012:19:56:16][http-9443-2]: mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: Getting Virtual List size: 7
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 0 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 0 1
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 1 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 1
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 1 2
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 2 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 2
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 2 3
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 3 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 3
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 3 4
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 4 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 4
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 4 5
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 5 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 5
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 5 6
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 6 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 6
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 6 7
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 7 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: returning null
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 7
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: returning 7 elements
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: curDate=Mon Jul 09 19:56:16 CEST 2012
id=caUpdateDir time=35
5:13 p.m.
Hi Klaus,
Could you try to issue new certificates to test your publisher instead
of updating directory?
Andrew
On 07/10/2012 01:05 AM, Wagner Klaus OSS sIT wrote:
Hi,
I am new to this list and hope you can help me out.
Starting from the FileBasedPublisher.java I created a class called
"MailBasedPublisher", compiled it and added it to the tomcat server running the
dogtag CS.
The class has been added in Publisher Registration and seems to be properly recognized.
The configuration of the parameters and adding the publisher to a rule combined with the
"NoMap" mapper did not show any problems.
To check whether the Publisher is called I added
CMS.debug("MailBasedPublisher: publish");
to the publish function. However, neither the mails are sent, nor the message is
generated, when I try to publish certificates. Versions tried are
pki-ca-9.0.20-1.fc16.noarch and pki-ca-1.3.6-1.el5.
Am I missing something? Can you help me or give some advice how to debug this issue.
Sending mails is just a test to get familiar with the system, I am trying to write code
to publish certificates to sql server in the future.
best regards, Klaus Wagner
ps. here is the publish configuration from CS.cfg and log output:
ca.publish.createOwnDNEntry=false
ca.publish.enable=true
ca.publish.ldappublish.enable=false
ca.publish.mapper.impl.LdapCaSimpleMap.class=com.netscape.cms.publish.mappers.LdapCaSimpleMap
ca.publish.mapper.impl.LdapDNCompsMap.class=com.netscape.cms.publish.mappers.LdapCertCompsMap
ca.publish.mapper.impl.LdapDNExactMap.class=com.netscape.cms.publish.mappers.LdapCertExactMap
ca.publish.mapper.impl.LdapEnhancedMap.class=com.netscape.cms.publish.mappers.LdapEnhancedMap
ca.publish.mapper.impl.LdapSimpleMap.class=com.netscape.cms.publish.mappers.LdapSimpleMap
ca.publish.mapper.impl.LdapSubjAttrMap.class=com.netscape.cms.publish.mappers.LdapCertSubjMap
ca.publish.mapper.impl.NoMap.class=com.netscape.cms.publish.mappers.NoMap
ca.publish.mapper.instance.LdapCaCertMap.createCAEntry=true
ca.publish.mapper.instance.LdapCaCertMap.dnPattern=UID=$subj.cn,OU=people,O=$subj.o
ca.publish.mapper.instance.LdapCaCertMap.pluginName=LdapCaSimpleMap
ca.publish.mapper.instance.LdapCrlMap.createCAEntry=true
ca.publish.mapper.instance.LdapCrlMap.dnPattern=UID=$subj.cn,OU=people,O=$subj.o
ca.publish.mapper.instance.LdapCrlMap.pluginName=LdapCaSimpleMap
ca.publish.mapper.instance.LdapUserCertMap.dnPattern=UID=$subj.UID,OU=people,O=$subj.o
ca.publish.mapper.instance.LdapUserCertMap.pluginName=LdapSimpleMap
ca.publish.mapper.instance.NoMap.pluginName=NoMap
ca.publish.publisher.impl.FileBasedPublisher.class=com.netscape.cms.publish.publishers.FileBasedPublisher
ca.publish.publisher.impl.LdapCaCertPublisher.class=com.netscape.cms.publish.publishers.LdapCaCertPublisher
ca.publish.publisher.impl.LdapCertificatePairPublisher.class=com.netscape.cms.publish.publishers.LdapCertificatePairPublisher
ca.publish.publisher.impl.LdapCrlPublisher.class=com.netscape.cms.publish.publishers.LdapCrlPublisher
ca.publish.publisher.impl.LdapDeltaCrlPublisher.class=com.netscape.cms.publish.publishers.LdapCrlPublisher
ca.publish.publisher.impl.LdapUserCertPublisher.class=com.netscape.cms.publish.publishers.LdapUserCertPublisher
ca.publish.publisher.impl.MailBasedPublisher.class=com.netscape.cms.publish.publishers.MailBasedPublisher
ca.publish.publisher.impl.OCSPPublisher.class=com.netscape.cms.publish.publishers.OCSPPublisher
ca.publish.publisher.instance.LdapCaCertPublisher.caCertAttr=caCertificate;binary
ca.publish.publisher.instance.LdapCaCertPublisher.caObjectClass=pkiCA
ca.publish.publisher.instance.LdapCaCertPublisher.pluginName=LdapCaCertPublisher
ca.publish.publisher.instance.LdapCrlPublisher.crlAttr=certificateRevocationList;binary
ca.publish.publisher.instance.LdapCrlPublisher.crlObjectClass=pkiCA
ca.publish.publisher.instance.LdapCrlPublisher.pluginName=LdapCrlPublisher
ca.publish.publisher.instance.LdapCrossCertPairPublisher.caObjectClass=pkiCA
ca.publish.publisher.instance.LdapCrossCertPairPublisher.crossCertPairAttr=crossCertificatePair;binary
ca.publish.publisher.instance.LdapCrossCertPairPublisher.pluginName=LdapCertificatePairPublisher
ca.publish.publisher.instance.LdapDeltaCrlPublisher.crlAttr=deltaRevocationList;binary
ca.publish.publisher.instance.LdapDeltaCrlPublisher.crlObjectClass=pkiCA,deltaCRL
ca.publish.publisher.instance.LdapDeltaCrlPublisher.pluginName=LdapDeltaCrlPublisher
ca.publish.publisher.instance.LdapUserCertPublisher.certAttr=userCertificate;binary
ca.publish.publisher.instance.LdapUserCertPublisher.pluginName=LdapUserCertPublisher
ca.publish.publisher.instance.MailCertPublisher.mailfromaddress=s6690@morbo.user.lan.at<mailto:ca.publish.publisher.instance.MailCertPublisher.mailfromaddress=s6690@morbo.user.lan.at>
ca.publish.publisher.instance.MailCertPublisher.mailsmtpaddress=172.0.0.1
ca.publish.publisher.instance.MailCertPublisher.mailtoaddress=klaus.wagner@s-itsolutions.at<mailto:ca.publish.publisher.instance.MailCertPublisher.mailtoaddress=klaus.wagner@s-itsolutions.at>
ca.publish.publisher.instance.MailCertPublisher.pluginName=MailBasedPublisher
ca.publish.queue.enable=true
ca.publish.queue.maxNumberOfThreads=3
ca.publish.queue.pageSize=40
ca.publish.queue.priorityLevel=0
ca.publish.queue.saveStatus=200
ca.publish.rule.impl.Rule.class=com.netscape.cmscore.ldap.LdapRule
ca.publish.rule.instance.LdapCaCertRule.enable=false
ca.publish.rule.instance.LdapCaCertRule.mapper=LdapCaCertMap
ca.publish.rule.instance.LdapCaCertRule.pluginName=Rule
ca.publish.rule.instance.LdapCaCertRule.predicate=
ca.publish.rule.instance.LdapCaCertRule.publisher=LdapCaCertPublisher
ca.publish.rule.instance.LdapCaCertRule.type=cacert
ca.publish.rule.instance.LdapCrlRule.enable=false
ca.publish.rule.instance.LdapCrlRule.mapper=LdapCrlMap
ca.publish.rule.instance.LdapCrlRule.pluginName=Rule
ca.publish.rule.instance.LdapCrlRule.predicate=
ca.publish.rule.instance.LdapCrlRule.publisher=LdapCrlPublisher
ca.publish.rule.instance.LdapCrlRule.type=crl
ca.publish.rule.instance.LdapUserCertRule.enable=false
ca.publish.rule.instance.LdapUserCertRule.mapper=LdapUserCertMap
ca.publish.rule.instance.LdapUserCertRule.pluginName=Rule
ca.publish.rule.instance.LdapUserCertRule.predicate=
ca.publish.rule.instance.LdapUserCertRule.publisher=LdapUserCertPublisher
ca.publish.rule.instance.LdapUserCertRule.type=certs
ca.publish.rule.instance.LdapXCertRule.enable=false
ca.publish.rule.instance.LdapXCertRule.mapper=LdapCaCertMap
ca.publish.rule.instance.LdapXCertRule.pluginName=Rule
ca.publish.rule.instance.LdapXCertRule.predicate=
ca.publish.rule.instance.LdapXCertRule.publisher=LdapCrossCertPairPublisher
ca.publish.rule.instance.LdapXCertRule.type=xcert
ca.publish.rule.instance.MailCertRule.enable=true
ca.publish.rule.instance.MailCertRule.mapper=NoMap
ca.publish.rule.instance.MailCertRule.pluginName=Rule
ca.publish.rule.instance.MailCertRule.predicate=
ca.publish.rule.instance.MailCertRule.publisher=MailCertPublisher
ca.publish.rule.instance.MailCertRule.type=certs
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet:service() uri = /ca/agent/ca/updateDir
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param
name='updateValid' value='yes'
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param
name='expiredFrom' value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param name='revokedTo'
value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param
name='revokedFrom' value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param name='expiredTo'
value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param name='validTo'
value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet::service() param name='validFrom'
value=''
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: caUpdateDir start to service.
[09/Jul/2012:19:56:16][http-9443-2]: IP: 10.18.49.69
[09/Jul/2012:19:56:16][http-9443-2]: AuthMgrName: certUserDBAuthMgr
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: retrieving SSL certificate
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: certUID=CN=Klaus CA Administrator of
Instance
pki-ca,UID=admin,E=klaus.wagner@s-itsolutions.at,O=UserLan<mailto:E=klaus.wagner@s-itsolutions.at,O=UserLan>
Domain
[09/Jul/2012:19:56:16][http-9443-2]: CertUserDBAuth: started
[09/Jul/2012:19:56:16][http-9443-2]: CertUserDBAuth: Retrieving client certificate
[09/Jul/2012:19:56:16][http-9443-2]: CertUserDBAuth: Got client certificate
[09/Jul/2012:19:56:16][http-9443-2]: Authentication: client certificate found
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: Authentication: mapped certificate to user
[09/Jul/2012:19:56:16][http-9443-2]: authenticated
uid=admin,ou=people,dc=morbo.user.lan.at-pki-ca
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: userid=admin
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: in auditSubjectID
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: auditSubjectID auditContext
{locale=en_US,EN;Q=0.5, userid=admin, ipAddress=10.18.49.69,
authManagerId=certUserDBAuthMgr}
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet auditSubjectID: subjectID: admin
[09/Jul/2012:19:56:16][http-9443-2]: SignedAuditEventFactory: create()
message=[AuditEvent=AUTH_SUCCESS][SubjectID=admin][Outcome=Success][AuthMgr=certUserDBAuthMgr]
authentication success
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: in auditSubjectID
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: auditSubjectID auditContext
{locale=en_US,EN;Q=0.5, userid=admin, ipAddress=10.18.49.69,
authManagerId=certUserDBAuthMgr}
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet auditSubjectID: subjectID: admin
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: in auditGroupID
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: auditGroupID auditContext
{locale=en_US,EN;Q=0.5, userid=admin, ipAddress=10.18.49.69,
authManagerId=certUserDBAuthMgr}
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet auditGroupID: groupID: null
[09/Jul/2012:19:56:16][http-9443-2]: checkACLS(): ACLEntry expressions=
group="Certificate Manager Agents"
[09/Jul/2012:19:56:16][http-9443-2]: evaluating expressions: group="Certificate
Manager Agents"
[09/Jul/2012:19:56:16][http-9443-2]: GroupAccessEvaluator: evaluate: uid=admin
value="Certificate Manager Agents"
[09/Jul/2012:19:56:16][http-9443-2]: GroupAccessEvaluator: evaluate: no gid in authToken
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: UGSubsystem.isMemberOf() using new lookup code
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: authorization search base: cn=Certificate Manager
Agents,ou=groups,dc=morbo.user.lan.at-pki-ca
[09/Jul/2012:19:56:16][http-9443-2]: authorization search filter:
(uniquemember=uid=admin,ou=people,dc=morbo.user.lan.at-pki-ca)
[09/Jul/2012:19:56:16][http-9443-2]: authorization result: true
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: evaluated expression: group="Certificate
Manager Agents" to be true
[09/Jul/2012:19:56:16][http-9443-2]: DirAclAuthz: authorization passed
[09/Jul/2012:19:56:16][http-9443-2]: SignedAuditEventFactory: create()
message=[AuditEvent=AUTHZ_SUCCESS][SubjectID=admin][Outcome=Success][aclResource=certServer.ca.directory][Op=update]
authorization success
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: SignedAuditEventFactory: create()
message=[AuditEvent=ROLE_ASSUME][SubjectID=admin][Outcome=Success][Role=Certificate
Manager Agents, Administrators, Security Domain Administrators, Enterprise CA
Administrators, Enterprise KRA Administrators, Enterprise OCSP Administrators, Enterprise
TKS Administrators, Enterprise RA Administrators, Enterprise TPS Administrators] assume
privileged role
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 1
[09/Jul/2012:19:56:16][http-9443-2]: In findCertRecordsInList with Jumpto 0
[09/Jul/2012:19:56:16][http-9443-2]: In DBVirtualList filter attrs startFrom sortKey
pageSize filter: (certstatus=VALID) attrs: null pageSize 40 startFrom 010
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: getEntries returning 7
[09/Jul/2012:19:56:16][http-9443-2]: mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: Getting Virtual List size: 7
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 0 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 0 1
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 1 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 1
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 1 2
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 2 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 2
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 2 3
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 3 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 3
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 3 4
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 4 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 4
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 4 5
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 5 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 5
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 5 6
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 6 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 6
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 6 7
[09/Jul/2012:19:56:16][http-9443-2]: getElementAt: 7 mTop 0
[09/Jul/2012:19:56:16][http-9443-2]: returning null
[09/Jul/2012:19:56:16][http-9443-2]: processing record: 7
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: returning 7 elements
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In PublisherProcessor::publishCert
[09/Jul/2012:19:56:16][http-9443-2]: PublisherProcessor: in publishNow()
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: In LdapBoundConnFactory::getConn()
[09/Jul/2012:19:56:16][http-9443-2]: masterConn is connected: true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: conn is connected true
[09/Jul/2012:19:56:16][http-9443-2]: getConn: mNumConns now 2
[09/Jul/2012:19:56:16][http-9443-2]: returnConn: mNumConns now 3
[09/Jul/2012:19:56:16][http-9443-2]: CMSServlet: curDate=Mon Jul 09 19:56:16 CEST 2012
id=caUpdateDir time=35
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
6:18 a.m.
On 2012-07-11 00:13, Andrew Wnuk wrote:
Hi Klaus,
Could you try to issue new certificates to test your publisher instead of updating
directory?
Andrew
Hi Andrew,
I tried it and the result is the same. Neither the CMS.debug message, nor the e-mail is
generated.
Attached you can find the log.
The version in use is pki-ca-9.0.20-1.fc17.noarch as I upgraded the system.
To be sure the publishing is working at all, a FileBasePublisher has been set up as well
and is working fine:
[11/Jul/2012:12:23:37][http-9443-4]: ARequestNotifier notify
mIsPublishingQueueEnabled=false mMaxThreads=3
[11/Jul/2012:12:23:37][Thread-34]: In PublisherProcessor::publishCert
[11/Jul/2012:12:23:37][Thread-34]: PublisherProcessor: in publishNow()
[11/Jul/2012:12:23:37][Thread-34]: FileBasedPublisher: publish
[11/Jul/2012:12:23:37][Thread-34]: PublisherProcessor: in publishNow()
[11/Jul/2012:12:23:37][Thread-34]: acceptX509: Published cert serial no 0x8
best regards, Klaus Wagner
4:38 p.m.
On 07/11/2012 04:18 AM, Wagner Klaus OSS sIT wrote:
Hi Andrew,
I tried it and the result is the same. Neither the CMS.debug message, nor the e-mail is
generated.
Attached you can find the log.
The version in use is pki-ca-9.0.20-1.fc17.noarch as I upgraded the system.
To be sure the publishing is working at all, a FileBasePublisher has been set up as well
and is working fine:
[11/Jul/2012:12:23:37][http-9443-4]: ARequestNotifier notify
mIsPublishingQueueEnabled=false mMaxThreads=3
[11/Jul/2012:12:23:37][Thread-34]: In PublisherProcessor::publishCert
[11/Jul/2012:12:23:37][Thread-34]: PublisherProcessor: in publishNow()
[11/Jul/2012:12:23:37][Thread-34]: FileBasedPublisher: publish
[11/Jul/2012:12:23:37][Thread-34]: PublisherProcessor: in publishNow()
[11/Jul/2012:12:23:37][Thread-34]: acceptX509: Published cert serial no 0x8
best regards, Klaus Wagner
Hi Klaus,
Please check other log files for additional information.
You may need to put more debug messages to see if your publisher has
been initialized
and if publishing processor can access your publisher.
Best,
Andrew
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
12:11 p.m.
New subject: Custom Publishing class does not seem to be called correctly - Workaround found
On 2012-07-11 23:38, Andrew Wnuk wrote:
Please check other log files for additional information.
You may need to put more debug messages to see if your publisher has been initialized
and if publishing processor can access your publisher.
Hi again,
I finally found the problem after starting to use eclipse and adding some debug info to
the calls.
The NoMap mapper returns always null as result on the map() call, because dn mapping is
not needed for FileBasedPublishing publisher.
However in PublishNow() of class com.netscape.cmscore.ldap.PublisherProcessor the result
(of the mapper) is checked for being either:
Vector<String>
String
or if the called publisher is instanceof
com.netscape.cms.publish.publishers.FileBasedPublisher
Hence the NoMap mapper will never work for any other publisher than FileBasedPublisher and
no error/warning will be created in any log.
For convenience this could be mentioned somewhere in documentation or NoMap Mapper
description.
Workaround:
I created a dummy mapper that returns a non-empty String to be used with the Publisher I
created.
So far everything works find and altering dogtag code is not necessary. As I don't
need the DN mapping, the String can be abused to include further data in the publishing
process (eg. request data).
best regards,
Klaus
4309
days inactive
4312
days old
4 comments
2 participants
participants (2)
-
Andrew Wnuk -
Wagner Klaus OSS sIT