Re: [Pki-users] pki-ra port 12890 not up

Hi Henry, What version on mod_nss do you have? We have not tested the dogtag 1.3 pki-ra and pki-tps subsystems on RHEL/Centos because they require a later version (1.0.8) of mod_nss than the standard. Details on this and other issues can be found on the wiki: http://pki.fedoraproject.org/wiki/PKI_Known_Issues You might be able to make it work by forcing and install of the fedora 12 mod_nss libraries onto your RHEL/Centos box Cheers, Kev On 05/06/2010 10:07 PM, Henry GM wrote: > Dear all, > > Why pki-ra port not up after i install using yum > --enablerepo=epel-testing install pki-ra ? > For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration > running well and port up. > > [2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links > for '/var/lib/pki-ra' ... > [2010-05-07 11:47:05] [debug] Processing PKI security databases for > '/var/lib/pki-ra' ... > [2010-05-07 11:47:07] [debug] Processing PKI security modules for > '/var/lib/pki-ra' ... > [2010-05-07 11:47:07] [debug] Attempting to add hardware security > modules to system if applicable ... > [2010-05-07 11:47:07] [debug] module name: lunasa lib: > /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST! > [2010-05-07 11:47:07] [debug] module name: nfast lib: > /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST! > [2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki > [2010-05-07 11:47:07] [debug] Restorecon file context for > /var/lib/pki-ra > [2010-05-07 11:47:08] [debug] Restorecon file context for > /var/log/pki-ra > [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra > [2010-05-07 11:47:08] [debug] Restorecon file context for > /usr/sbin/httpd.worker > [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for > 12890 > > PKI instance creation completed ... > > Stopping pki-ra: httpd (no pid file) not running > [ OK ] > ============================== > Starting pki-ra: ............................... [ OK ] > > pki-ra pid file exists but is empty > Before proceeding with the configuration, make sure > the firewall settings of this machine permit proper > access to this subsystem. > > Please start the configuration by accessing: > > https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyM... > > > After configuration, the server can be operated by the command: > > /sbin/service pki-rad restart pki-ra > > from /var/log/pki-ra/error.log i got messages : > /usr/sbin/httpd.worker: symbol lookup error: > /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so: > > undefined symbol: ap_get_server_banner > > perl -v > This is perl, v5.8.8 built for i386-linux-thread-multi > > How to fix that ? > > Rgds, > Henry G.