This bug has been fixed in the latest versions. See
https://bugzilla.redhat.com/show_bug.cgi?id=621602 for details.
Basically, there is a typo (one too many ||) in the acl entry:
certServer.publisher.configuration
You can fix this in the acl.ldif file or even through the acl
configuration in the pkiconsole.
Ade
On Sun, 2010-10-10 at 11:41 +0200, Frederic d'Huart wrote:
Hello Pki Users,
I have an problem to access the DogTAG Publishing tab of the
PKIConsole.
I want to enable a new CRL File publishing object as described into
the section 8.2.1 of the admin guide.
but I receive the error "You are not allowed to perform this
operation" anytime I'm trying to access the
publishing tab and subObjects.
The ca_log show this error
___
/var/log/pki-ca/debug
[10/Oct/2010:11:06:52][http-9445-Processor24]:
LdapBoundConnFactory.java:391:returnConn() returnConn: mNumConns now 3
[10/Oct/2010:11:06:52][http-9445-Processor24]:
AAclAuthz.java:643:evaluateExpressions() evaluated expression:
group="Registration Manager Agents" to be true
[10/Oct/2010:11:06:52][http-9445-Processor24]:
SignedAuditEventFactory.java:78:create() SignedAuditEventFactory:
create()
message=[AuditEvent=AUTHZ_FAIL][SubjectID=admin][Outcome=Failure][aclResource=<null>][Op=<null>]
authorization failure
[10/Oct/2010:11:06:52][http-9445-Processor24]:
LdapBoundConnFactory.java:343:getConn() getConn: mNumConns now 2
[10/Oct/2010:11:06:52][http-9445-Processor24]:
LdapBoundConnFactory.java:391:returnConn() returnConn: mNumConns now 3
[10/Oct/2010:11:06:52][http-9445-Processor24]:
SignedAuditEventFactory.java:78:create() SignedAuditEventFactory:
create()
message=[AuditEvent=ROLE_ASSUME][SubjectID=admin][Outcome=Failure][Role=Certificate
Manager Agents, Registration Manager Agents, Trusted Managers, Administrators, Security
Domain Administrators, Enterprise CA Administrators, Enterprise KRA Administrators,
Enterprise OCSP Administrators, Enterprise TKS Administrators, Enterprise RA
Administrators, Enterprise TPS Administrators] assume privileged role
I have checked everywhere in the PKIConsole ACL's tab, but I didn't
find anything ...
Does somebody would have an idea how to fix it ?
Thank you ..
_______________________________________________
Pki-users mailing list
Pki-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-users