Re: [Pki-users] pki-ra port 12890 not up
Hi Henry,
What version on mod_nss do you have? We have not tested the dogtag 1.3
pki-ra and pki-tps subsystems on RHEL/Centos because they require a
later version (1.0.8) of mod_nss than the standard.
Details on this and other issues can be found on the wiki:
http://pki.fedoraproject.org/wiki/PKI_Known_Issues
You might be able to make it work by forcing and install of the
fedora 12 mod_nss libraries onto your RHEL/Centos box
Cheers,
Kev
On 05/06/2010 10:07 PM, Henry GM wrote:
Dear all,
Why pki-ra port not up after i install using yum
--enablerepo=epel-testing install pki-ra ?
For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration
running well and port up.
[2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links
for '/var/lib/pki-ra' ...
[2010-05-07 11:47:05] [debug] Processing PKI security databases for
'/var/lib/pki-ra' ...
[2010-05-07 11:47:07] [debug] Processing PKI security modules for
'/var/lib/pki-ra' ...
[2010-05-07 11:47:07] [debug] Attempting to add hardware security
modules to system if applicable ...
[2010-05-07 11:47:07] [debug] module name: lunasa lib:
/usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST!
[2010-05-07 11:47:07] [debug] module name: nfast lib:
/opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST!
[2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki
[2010-05-07 11:47:07] [debug] Restorecon file context for /var/lib/pki-ra
[2010-05-07 11:47:08] [debug] Restorecon file context for /var/log/pki-ra
[2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra
[2010-05-07 11:47:08] [debug] Restorecon file context for
/usr/sbin/httpd.worker
[2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for
12890
PKI instance creation completed ...
Stopping pki-ra: httpd (no pid file) not running
[ OK ]
==============================
Starting pki-ra: ............................... [ OK ]
pki-ra pid file exists but is empty
Before proceeding with the configuration, make sure
the firewall settings of this machine permit proper
access to this subsystem.
Please start the configuration by accessing:
https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyM...
After configuration, the server can be operated by the command:
/sbin/service pki-rad restart pki-ra
from /var/log/pki-ra/error.log i got messages :
/usr/sbin/httpd.worker: symbol lookup error:
/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so:
undefined symbol: ap_get_server_banner
perl -v
This is perl, v5.8.8 built for i386-linux-thread-multi
How to fix that ?
Rgds,
Henry G.
------------------------------------------------------------------------
_______________________________________________
Pki-users mailing list
Pki-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-users