so the root cause seems to be this (was bit higher in the debug log than
previous post):
[18/Feb/2014:15:34:58][http-9445-2]: SecurityDomainSessionTable: unable
to create session entry-1411012119543770863:
netscape.ldap.LDAPException: error result (21); host: value #0 invalid
per syntax
i found this ticket
https://fedorahosted.org/pki/ticket/457
anyone knows if this was fixed or any workaround?
jd
On 02/18/2014 03:03 PM, Jindrich Dolezal wrote:
additional info:
on the master ca machine i found following in the log file:
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet:service() uri =
/ca/ee/ca/updateNumberRange
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet::service() param
name='type' value='request'
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet::service() param
name='xmlOutput' value='true'
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet::service() param
name='sessionID' value='-1411012119543770863'
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet: caUpdateNumberRange
start to service.
[18/Feb/2014:14:00:19][http-9444-2]: UpdateNumberRange: processing...
[18/Feb/2014:14:00:19][http-9444-2]: UpdateNumberRange process:
authentication starts
[18/Feb/2014:14:00:19][http-9444-2]: IP: 10.10.16.73
[18/Feb/2014:14:00:19][http-9444-2]: AuthMgrName: TokenAuth
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet: no client certificate
found
[18/Feb/2014:14:00:19][http-9444-2]: TokenAuthentication: start
[18/Feb/2014:14:00:19][http-9444-2]: TokenAuthentication:
content=sessionID=-1411012119543770863&hostname=10.10.16.73
[18/Feb/2014:14:00:19][http-9444-1]: CMSServlet:service() uri =
/ca/ee/ca/tokenAuthenticate
[18/Feb/2014:14:00:19][http-9444-1]: CMSServlet::service() param
name='hostname' value='10.10.16.73'
[18/Feb/2014:14:00:19][http-9444-1]: CMSServlet::service() param
name='sessionID' value='-1411012119543770863'
[18/Feb/2014:14:00:19][http-9444-1]: CMSServlet: caTokenAuthenticate
start to service.
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication:
sessionId=-1411012119543770863
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication:
givenHost=10.10.16.73
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication: checking
session in the session table
[18/Feb/2014:14:00:19][http-9444-1]: CMSEngine: getPasswordStore():
password store initialized before.
[18/Feb/2014:14:00:19][http-9444-1]: CMSEngine: getPasswordStore():
password store initialized.
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication: session not
found
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication authenticate
failed, session id does not exist.
[18/Feb/2014:14:00:19][http-9444-2]: TokenAuthentication: status=1
[18/Feb/2014:14:00:19][http-9444-2]: SignedAuditEventFactory: create()
message=[AuditEvent=AUTH_FAIL][SubjectID=$Unidentified$][Outcome=Failure][AuthMgr=TokenAuth][AttemptedCred=$Unidentified$]
authentication failure
On 02/18/2014 02:47 PM, Jindrich Dolezal wrote:
> hi,
>
> im using dogtag 9.0 (pki-ca-9.0.3) on rhel 6.2 and want to make
> clone. i'm following 'Deploy and Install guide' chapter 10.3. So have
> master ca, created clone ca and run the configuration wizard. i got
> to point (point 10) where i am supposed to "Import Keys and
> Certificates". After filling p12 file and password i ended with:
>
> " org.xml.sax.SAXParseException; lineNumber: 2; columnNumber: 15;
> Open quote is expected for attribute "BGCOLOR" associated with an
> element type "BODY"."
>
> error appearing on the page (see attached picture).
> Note that when i fill incorrect file or invalid passord, the wizard
> tells me with appropriate error (like no such file/...) but when
> everything is correct SAX exception appears. SAX exception also
> appears when i left the inputs blank and click next => therefore this
> step is unpassable.
>
> has anyone performed cloning with success?
>
> thanks,
>
> jd
>
>
>
</pre>****************************************************************************************<br>This
> email and any files transmitted with are confidential and intended
> solely for the<br>use of the individual or entity to whom they are
> addressed. If you have received this<br>email in error then please
> delete it and notify the sender. Do not make a copy or forward<br>it
> to anyone. This footnote also confirms that this email message has
> been swept for the<br>presence of computer viruses.<br><br>Adaptive
> Mobile Security Ltd, Ferry House, 48 Lower Mount Street, Dublin 2,
> Ireland<br>Directors: B. Collins, G. Maclachlan (UK), N. Grierson
> (UK), J. Ennis (UK), D. Summers (UK).<br>Registered in Ireland,
> Company No. 370343, VAT
>
Reg.No.IE6390343O<br>****************************************************************************************</pre>
>
>
> _______________________________________________
> Pki-users mailing list
> Pki-users(a)redhat.com
>
https://www.redhat.com/mailman/listinfo/pki-users
</pre>****************************************************************************************<br>This
email and any files transmitted with are confidential and intended
solely for the<br>use of the individual or entity to whom they are
addressed. If you have received this<br>email in error then please
delete it and notify the sender. Do not make a copy or forward<br>it
to anyone. This footnote also confirms that this email message has
been swept for the<br>presence of computer viruses.<br><br>Adaptive
Mobile Security Ltd, Ferry House, 48 Lower Mount Street, Dublin 2,
Ireland<br>Directors: B. Collins, G. Maclachlan (UK), N. Grierson
(UK), J. Ennis (UK), D. Summers (UK).<br>Registered in Ireland,
Company No. 370343, VAT
Reg.No.IE6390343O<br>****************************************************************************************</pre>
_______________________________________________
Pki-users mailing list
Pki-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-users
</pre>****************************************************************************************<br>This
email and any files transmitted with are confidential and intended solely for
the<br>use of the individual or entity to whom they are addressed. If you have
received this<br>email in error then please delete it and notify the sender. Do not
make a copy or forward<br>it to anyone. This footnote also confirms that this email
message has been swept for the<br>presence of computer
viruses.<br><br>Adaptive Mobile Security Ltd, Ferry House, 48 Lower Mount
Street, Dublin 2, Ireland<br>Directors: B. Collins, G. Maclachlan (UK), N. Grierson
(UK), J. Ennis (UK), D. Summers (UK).<br>Registered in Ireland, Company No. 370343,
VAT
Reg.No.IE6390343O<br>****************************************************************************************</pre>