Hi Henry, What version on mod_nss do you have? We have not tested the dogtag 1.3 pki-ra and pki-tps subsystems on RHEL/Centos because they require a later version (1.0.8) of mod_nss than the standard. Details on this and other issues can be found on the wiki: http://pki.fedoraproject.org/wiki/PKI_Known_Issues You might be able to make it work by forcing and install of the fedora 12 mod_nss libraries onto your RHEL/Centos box Cheers, Kev On 05/06/2010 10:07 PM, Henry GM wrote:
Dear all,
Why pki-ra port not up after i install using yum --enablerepo=epel-testing install pki-ra ? For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration running well and port up.
[2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links for '/var/lib/pki-ra' ... [2010-05-07 11:47:05] [debug] Processing PKI security databases for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Processing PKI security modules for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Attempting to add hardware security modules to system if applicable ... [2010-05-07 11:47:07] [debug] module name: lunasa lib: /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] module name: nfast lib: /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki [2010-05-07 11:47:07] [debug] Restorecon file context for /var/lib/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /var/log/pki-ra [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /usr/sbin/httpd.worker [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for 12890
PKI instance creation completed ...
Stopping pki-ra: httpd (no pid file) not running [ OK ] ============================== Starting pki-ra: ............................... [ OK ]
pki-ra pid file exists but is empty Before proceeding with the configuration, make sure the firewall settings of this machine permit proper access to this subsystem.
Please start the configuration by accessing:
https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyMuxO...
After configuration, the server can be operated by the command:
/sbin/service pki-rad restart pki-ra
from /var/log/pki-ra/error.log i got messages : /usr/sbin/httpd.worker: symbol lookup error: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so: undefined symbol: ap_get_server_banner
perl -v This is perl, v5.8.8 built for i386-linux-thread-multi
How to fix that ?
Rgds, Henry G.
------------------------------------------------------------------------
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users