I experienced the same install issue. Here is what you have to do. When you run your "yum install pki-ca" in the first place, observe the version of pki-related dependencies; i.e. pkiconsole, pki-ca, dogtag* I believe when you do this yum install, yum accidently picks up 1.3.0 version, except the pki-ca. In order to confirm this mixed version, you can do "yum list | grep pki | grep installed" This will list the version and pki-related packages and notice the mixed of 1.2.0 and 1.3.0 versions. To ensure version consistency, you can either all 1.2.0 version or 1.30 version. I personally keep the 1.3.0 version. To keep the 1.3.0 version, do "yum erase pki-ca" and other pki and dogtag packages belonging to 1.2.0 version. After you erase all the 1.2.0 version, do "yum list | grep pki | grep installed" again to ensure no 1.2.0 version package is installed. Also, make sure that all dependencies have also been installed; I.e. the java, tomcat, etc. If those dependencies are not installed yet, I recommend you to install those packages separately. Assuming the remainder of the pakcages are pki related and dogtag related, you can use the following command to install the 1.3.0 version. Use "yum install pki-ca --enablerepo=updates-testing". This command will pick up the 1.30 versions for pki and dogtag related packages. Thanks to Kashyap for showing this, reff: https://www.redhat.com/archives/pki-users/2010-January/msg00016.html When you do this, you might encounter error for which you want to check your /etc/yum.repos.d/fedora-updates-testing.repo In this file make sure to uncomment the "base...." and comment the "mirrorlist....." for each section. After you successfully install the pki-ca packages, you can proceed with pkicreate to create the ca instance. Just type the pkicreate and it spits out the required parameters. I sue default value. Let me know if you need more help. By the way, I have not created pki-ra yet; that's the next thing on my list. By the way, when you configured your ca, make sure your directory server process is running; check using "ps -ef | grep dirsrv" (if you install your directory server locally). Or, use /etc/init status | start | stop | restart. Erwin -------------------------------------------------- From: "Rafal Kaminski" <rafal.kaminski@blstream.com> Sent: Monday, March 01, 2010 8:34 AM To: <pki-users@redhat.com> Subject: [Pki-users] yum install pki-ca - and problem :(

Hi all,

I install dogtag two months ago, and now I repeat that move, but ...

When I use: yum install pki-ca

I see:

Installing : pki-common-1.3.0-7.fc11.noarch 156/158 Installing : hal-info-20090414-1.fc11.noarch 157/158 Adding default PKI group "pkiuser" to /etc/group. Adding default PKI user "pkiuser" to /etc/passwd. useradd: warning: the home directory already exists. Not copying any file from skel directory into it. Installing : pki-ca-1.2.0-4.fc11.noarch 158/158 PKI instance creation Utility ...

[2010-02-02 04:39:15] [error] create_symbolic_link(): illegal destination path => /usr/share/java/ca.jar.

Error detected would you like to clean up /var/lib/pki-ca (Y/N)? Error detected would you like to clean up /var/lib/pki-ca (Y/N)?

Can sombody tell me why?

BR,

Rafal Kaminski

_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users