Kevin, Thanks for advise, i was upgrade the default mod_nss 1.0.3-8.el5 for Centos 5 with http://yum.aclub.net/pub/linux/centos/5/umask/umask.repo so at my centos have mod_nss.i386 0:1.0.7-umask.4 This not working now with pki-ra As you advice to replace using mod_nss-1.0.8-2.fc12.i686.rpm i already try it and got problem because rpmlib(FileDigests) <= 4.6.0-1 is needed by mod_nss-1.0.8-2.fc12.i686 rpmlib(PayloadIsXz) <= 5.2-1 is needed by mod_nss-1.0.8-2.fc12.i686.... i cant find sources for rpmlib or rpm-devel.. maybe i must change centos 5.4 to fedora 12. or any idea to make mod_nss-1.0.8-2.fc12.i686 work for centos 5.4 ? Rgds, Henry Gultom with the On 5/7/2010 11:31 PM, Kevin Unthank wrote:
Hi Henry,
What version on mod_nss do you have? We have not tested the dogtag 1.3 pki-ra and pki-tps subsystems on RHEL/Centos because they require a later version (1.0.8) of mod_nss than the standard.
Details on this and other issues can be found on the wiki: http://pki.fedoraproject.org/wiki/PKI_Known_Issues
You might be able to make it work by forcing and install of the fedora 12 mod_nss libraries onto your RHEL/Centos box
Cheers, Kev
On 05/06/2010 10:07 PM, Henry GM wrote:
Dear all,
Why pki-ra port not up after i install using yum --enablerepo=epel-testing install pki-ra ? For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration running well and port up.
[2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links for '/var/lib/pki-ra' ... [2010-05-07 11:47:05] [debug] Processing PKI security databases for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Processing PKI security modules for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Attempting to add hardware security modules to system if applicable ... [2010-05-07 11:47:07] [debug] module name: lunasa lib: /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] module name: nfast lib: /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki [2010-05-07 11:47:07] [debug] Restorecon file context for /var/lib/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /var/log/pki-ra [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /usr/sbin/httpd.worker [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for 12890
PKI instance creation completed ...
Stopping pki-ra: httpd (no pid file) not running [ OK ] ============================== Starting pki-ra: ............................... [ OK ]
pki-ra pid file exists but is empty Before proceeding with the configuration, make sure the firewall settings of this machine permit proper access to this subsystem.
Please start the configuration by accessing:
https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyMuxO...
After configuration, the server can be operated by the command:
/sbin/service pki-rad restart pki-ra
from /var/log/pki-ra/error.log i got messages : /usr/sbin/httpd.worker: symbol lookup error: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so:
undefined symbol: ap_get_server_banner
perl -v This is perl, v5.8.8 built for i386-linux-thread-multi
How to fix that ?
Rgds, Henry G.