Marc,<br><br>Thanks for your support.  I am sorry to confuse you.<br><br>For some reasons, I wrongly cut and paste different log files.<br><br>Anyway, after I updated all my Dogtag components from version 1.2.0 to 1.3.0, I did not experience any issue in configuring the pki-ca instance.<br>
<br>Is it fair to assume that some of the issue I experienced during 1.2.0 pki-ca configuration might have been resolved in 1.3.0?<br>I guess, in order to validate my hypothesis, I am willing to perform another fresh OS and DCS install.<br>
<br>Once again, thanks.<br><br>Thanks,<br>Erwin<br><br><br><div class="gmail_quote">On Wed, Feb 10, 2010 at 7:22 PM, Marc Sauton <span dir="ltr">&lt;<a href="mailto:msauton@redhat.com">msauton@redhat.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">


  

<div bgcolor="#ffffff" text="#000000">
looks like there are several different errors and different time stamps.<br>
In the first log provided, watch out for<div class="im"><br>
[10/Feb/2010:18:17:59][http-9545-Processor24]:
com.netscape.cms.servlet.filter.AgentRequestFilter:  Use HTTPS port
&#39;9543&#39; instead of &#39;9545&#39; when performing Agent tasks!<br></div>
Use the admin secure port to reach the web configuration wizard, like
shown from the service pki-ca1status command after a pkicreate (or by
the pkicreate command itself).<br>
M.<div><div></div><div class="h5"><font color="red"><br>
<br>
</font>On 02/10/2010 04:53 PM, Erwin Himawan wrote:
</div></div><blockquote type="cite"><div><div></div><div class="h5">Here is the output of /var/log/pki-ca1/catalina.out<br>
  <br>
DAP operation failure - cn=2,ou=ca,ou=requests,dc=FQDN-pki-ca1
netscape.ldap.LDAPException: error result (68)<br>
http-9545-Processor19: log level: {0} is invalid, should be 0-6<br>
  <br>
  <br>
Here is the output of /var/log/pki-ca1/system<br>
  <br>
6889.http-9545-Processor19 - [10/Feb/2010:18:47:18 CST] [3] [3] Servlet
caGetAdminBySerial: Error getting certRecord for serialNo 0x2. Error
LDAP operation failure - cn=2,ou=certificateRepository, ou=ca,
dc=FQDN-pki-ca1 netscape.ldap.LDAPException: error result (32);
matchedDN = ou=certificaterepository,ou=ca,dc=FQDN-pki-ca1.<br>
6889.http-9545-Processor19 - [10/Feb/2010:18:47:18 CST] [3] [3] Servlet
caGetAdminBySerial: Certificate Serial Number 2 not found<br>
6889.http-9545-Processor19 - [10/Feb/2010:18:47:18 CST] [3] [20]
CMSgateway:Could not load template
/var/lib/pki-ca1/webapps/ca/admin/GenError.template error
java.io.FileNotFoundException:
/var/lib/pki-ca1/webapps/ca/admin/GenError.template (No such file or
directory).<br>
6889.http-9545-Processor19 - [10/Feb/2010:18:47:18 CST] [3] [3] Servlet
caGetAdminBySerial: Error outputting template /admin/GenError.template
. Error encountered while loading output template..<br>
  <br>
[10/Feb/2010:18:47:18][http-9545-Processor19]: getConn: mNumConns now 2<br>
[10/Feb/2010:18:47:18][http-9545-Processor19]: returnConn: mNumConns
now 3<br>
[10/Feb/2010:18:47:18][http-9545-Processor19]: SignedAuditEventFactory:
create()
message=[AuditEvent=ROLE_ASSUME][SubjectID=$NonRoleUser$][Outcome=Success][Role=&lt;null&gt;]
assume privileged role<br>
  <br>
[10/Feb/2010:18:47:18][http-9545-Processor19]: getConn: mNumConns now 2<br>
[10/Feb/2010:18:47:18][http-9545-Processor19]: returnConn: mNumConns
now 3<br>
[10/Feb/2010:18:47:18][http-9545-Processor19]: CMSServlet: curDate=Wed
Feb 10 18:47:18 CST 2010 id=caGetAdminBySerial time=20<br>
[10/Feb/2010:18:47:19][http-9545-Processor19]:
com.netscape.cms.servlet.filter.AgentRequestFilter:  Use HTTPS port
&#39;9543&#39; instead of &#39;9545&#39; when performing Agent tasks!<br>
  <br>
  <br>
  <br>
  <div class="gmail_quote">On Wed, Feb 10, 2010 at 6:36 PM, Erwin
Himawan <span dir="ltr">&lt;<a href="mailto:ehimawan@gmail.com" target="_blank">ehimawan@gmail.com</a>&gt;</span>
wrote:<br>
  <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi
All,<br>
    <br>
First of all, thanks for the help of the pki-users to get me through.<br>
    <br>
Here is the last step of my pki-ca configuration.<br>
I am in the &quot;Import Administrator Certificate&quot;<br>
When I clicked &quot;next&quot;, I got this error: <font color="red">java.lang.NullPointerException<br>
    <br>
    <br>
    <font color="#330033">Here is some output from the
/var/log/pki-ca1/debug</font>:<br>
    <br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: increasing minimum
connections by 3<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: new total available
connections 3<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: new number of
connections 3<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: getNextPanel input p=16<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: getNextPanel output p=17<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: ImportAdminCertPanel:
display<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: panel no=17<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: panel
name=importadmincert<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: total number of panels=19<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: according to ccMode,
authorization for servlet: caGetAdminBySerial is LDAP based, not XML
{1}, use default authz mgr: {2}.<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: CMSServlet:service() uri
= /ca/admin/ca/getBySerial<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: CMSServlet::service()
param name=&#39;serialNumber&#39; value=&#39;1&#39;<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: CMSServlet::service()
param name=&#39;browser&#39; value=&#39;netscape&#39;<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: CMSServlet::service()
param name=&#39;importCert&#39; value=&#39;true&#39;<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: CMSServlet:
caGetAdminBySerial start to service.<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: IP: 10.7.20.82<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: CMSServlet: no
authMgrName<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: checkACLS(): ACLEntry
expressions= user=&quot;anybody&quot;<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: evaluating expressions:
user=&quot;anybody&quot;<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: evaluated expression:
user=&quot;anybody&quot; to be true<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: DirAclAuthz:
authorization passed<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: SignedAuditEventFactory:
create()
message=[AuditEvent=AUTHZ_SUCCESS][SubjectID=$NonRoleUser$][Outcome=Success][aclResource=certServer.admin.certificate][Op=import]
authorization success<br>
    <br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: getConn: mNumConns now 2<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: returnConn: mNumConns
now 3<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: SignedAuditEventFactory:
create()
message=[AuditEvent=ROLE_ASSUME][SubjectID=$NonRoleUser$][Outcome=Success][Role=&lt;null&gt;]
assume privileged role<br>
    <br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: getConn: mNumConns now 2<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: returnConn: mNumConns
now 3<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]: CMSServlet: curDate=Wed
Feb 10 18:17:59 CST 2010 id=caGetAdminBySerial time=51<br>
[10/Feb/2010:18:17:59][http-9545-Processor24]:
com.netscape.cms.servlet.filter.AgentRequestFilter:  Use HTTPS port
&#39;9543&#39; instead of &#39;9545&#39; when performing Agent tasks!<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet: process<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet:service()
uri = /ca/admin/console/config/wizard<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet::service()
param name=&#39;p&#39; value=&#39;17&#39;<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet::service()
param name=&#39;caHost&#39; value=&#39;FQDN&#39;<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet::service()
param name=&#39;serialNumber&#39; value=&#39;1&#39;<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet::service()
param name=&#39;pkcs7&#39; value=&#39;PKCS7-VALUExxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&#39;<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet::service()
param name=&#39;op&#39; value=&#39;next&#39;<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet::service()
param name=&#39;caPort&#39; value=&#39;9545&#39;<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet: op=next<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet: size=19<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: WizardServlet: in next 17<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: ImportAdminCertPanel
update:  Root CA subsystem - (new Security Domain)<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: getConn: mNumConns now 2<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: returnConn: mNumConns
now 3<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: getConn: mNumConns now 2<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: returnConn: mNumConns
now 3<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: ImportAdminCertPanel
update: failed to add certificate. Exception:
java.lang.NullPointerException<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: panel no=17<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: panel
name=importadmincert<br>
[10/Feb/2010:18:18:01][http-9545-Processor24]: total number of panels=19<br>
    <br>
    <font color="#330033">Any idea how to resolve this issue?<br>
    <br>
Regards,<br>
Erwin<br>
    </font><br>
    </font><br>
    <br>
  </blockquote>
  </div>
  <br>
  </div></div><pre><fieldset></fieldset>
_______________________________________________
Pki-users mailing list
<a href="mailto:Pki-users@redhat.com" target="_blank">Pki-users@redhat.com</a>
<a href="https://www.redhat.com/mailman/listinfo/pki-users" target="_blank">https://www.redhat.com/mailman/listinfo/pki-users</a>
  </pre>
</blockquote>
<br>
</div>

</blockquote></div><br>