Dear all, Why pki-ra port not up after i install using yum --enablerepo=epel-testing install pki-ra ? For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration running well and port up. [2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links for '/var/lib/pki-ra' ... [2010-05-07 11:47:05] [debug] Processing PKI security databases for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Processing PKI security modules for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Attempting to add hardware security modules to system if applicable ... [2010-05-07 11:47:07] [debug] module name: lunasa lib: /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] module name: nfast lib: /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki [2010-05-07 11:47:07] [debug] Restorecon file context for /var/lib/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /var/log/pki-ra [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /usr/sbin/httpd.worker [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for 12890 PKI instance creation completed ... Stopping pki-ra: httpd (no pid file) not running [ OK ] ============================== Starting pki-ra: ............................... [ OK ] pki-ra pid file exists but is empty Before proceeding with the configuration, make sure the firewall settings of this machine permit proper access to this subsystem. Please start the configuration by accessing: https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyMuxO... After configuration, the server can be operated by the command: /sbin/service pki-rad restart pki-ra from /var/log/pki-ra/error.log i got messages : /usr/sbin/httpd.worker: symbol lookup error: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so: undefined symbol: ap_get_server_banner perl -v This is perl, v5.8.8 built for i386-linux-thread-multi How to fix that ? Rgds, Henry G.
Hi Henry, What version on mod_nss do you have? We have not tested the dogtag 1.3 pki-ra and pki-tps subsystems on RHEL/Centos because they require a later version (1.0.8) of mod_nss than the standard. Details on this and other issues can be found on the wiki: http://pki.fedoraproject.org/wiki/PKI_Known_Issues You might be able to make it work by forcing and install of the fedora 12 mod_nss libraries onto your RHEL/Centos box Cheers, Kev On 05/06/2010 10:07 PM, Henry GM wrote:
Dear all,
Why pki-ra port not up after i install using yum --enablerepo=epel-testing install pki-ra ? For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration running well and port up.
[2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links for '/var/lib/pki-ra' ... [2010-05-07 11:47:05] [debug] Processing PKI security databases for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Processing PKI security modules for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Attempting to add hardware security modules to system if applicable ... [2010-05-07 11:47:07] [debug] module name: lunasa lib: /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] module name: nfast lib: /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki [2010-05-07 11:47:07] [debug] Restorecon file context for /var/lib/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /var/log/pki-ra [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /usr/sbin/httpd.worker [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for 12890
PKI instance creation completed ...
Stopping pki-ra: httpd (no pid file) not running [ OK ] ============================== Starting pki-ra: ............................... [ OK ]
pki-ra pid file exists but is empty Before proceeding with the configuration, make sure the firewall settings of this machine permit proper access to this subsystem.
Please start the configuration by accessing:
https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyMuxO...
After configuration, the server can be operated by the command:
/sbin/service pki-rad restart pki-ra
from /var/log/pki-ra/error.log i got messages : /usr/sbin/httpd.worker: symbol lookup error: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so: undefined symbol: ap_get_server_banner
perl -v This is perl, v5.8.8 built for i386-linux-thread-multi
How to fix that ?
Rgds, Henry G.
------------------------------------------------------------------------
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
Kevin, Thanks for advise, i was upgrade the default mod_nss 1.0.3-8.el5 for Centos 5 with http://yum.aclub.net/pub/linux/centos/5/umask/umask.repo so at my centos have mod_nss.i386 0:1.0.7-umask.4 This not working now with pki-ra As you advice to replace using mod_nss-1.0.8-2.fc12.i686.rpm i already try it and got problem because rpmlib(FileDigests) <= 4.6.0-1 is needed by mod_nss-1.0.8-2.fc12.i686 rpmlib(PayloadIsXz) <= 5.2-1 is needed by mod_nss-1.0.8-2.fc12.i686.... i cant find sources for rpmlib or rpm-devel.. maybe i must change centos 5.4 to fedora 12. or any idea to make mod_nss-1.0.8-2.fc12.i686 work for centos 5.4 ? Rgds, Henry Gultom with the On 5/7/2010 11:31 PM, Kevin Unthank wrote:
Hi Henry,
What version on mod_nss do you have? We have not tested the dogtag 1.3 pki-ra and pki-tps subsystems on RHEL/Centos because they require a later version (1.0.8) of mod_nss than the standard.
Details on this and other issues can be found on the wiki: http://pki.fedoraproject.org/wiki/PKI_Known_Issues
You might be able to make it work by forcing and install of the fedora 12 mod_nss libraries onto your RHEL/Centos box
Cheers, Kev
On 05/06/2010 10:07 PM, Henry GM wrote:
Dear all,
Why pki-ra port not up after i install using yum --enablerepo=epel-testing install pki-ra ? For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration running well and port up.
[2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links for '/var/lib/pki-ra' ... [2010-05-07 11:47:05] [debug] Processing PKI security databases for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Processing PKI security modules for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Attempting to add hardware security modules to system if applicable ... [2010-05-07 11:47:07] [debug] module name: lunasa lib: /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] module name: nfast lib: /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki [2010-05-07 11:47:07] [debug] Restorecon file context for /var/lib/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /var/log/pki-ra [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /usr/sbin/httpd.worker [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for 12890
PKI instance creation completed ...
Stopping pki-ra: httpd (no pid file) not running [ OK ] ============================== Starting pki-ra: ............................... [ OK ]
pki-ra pid file exists but is empty Before proceeding with the configuration, make sure the firewall settings of this machine permit proper access to this subsystem.
Please start the configuration by accessing:
https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyMuxO...
After configuration, the server can be operated by the command:
/sbin/service pki-rad restart pki-ra
from /var/log/pki-ra/error.log i got messages : /usr/sbin/httpd.worker: symbol lookup error: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so:
undefined symbol: ap_get_server_banner
perl -v This is perl, v5.8.8 built for i386-linux-thread-multi
How to fix that ?
Rgds, Henry G.
On 05/07/10 16:19, Henry GM wrote:
Kevin,
Thanks for advise, i was upgrade the default mod_nss 1.0.3-8.el5 for Centos 5 with http://yum.aclub.net/pub/linux/centos/5/umask/umask.repo so at my centos have mod_nss.i386 0:1.0.7-umask.4 This not working now with pki-ra As you advice to replace using mod_nss-1.0.8-2.fc12.i686.rpm i already try it and got problem because rpmlib(FileDigests) <= 4.6.0-1 is needed by mod_nss-1.0.8-2.fc12.i686 rpmlib(PayloadIsXz) <= 5.2-1 is needed by mod_nss-1.0.8-2.fc12.i686.... i cant find sources for rpmlib or rpm-devel.. maybe i must change centos 5.4 to fedora 12. or any idea to make mod_nss-1.0.8-2.fc12.i686 work for centos 5.4 ?
Rgds, Henry Gultom
Henry, Not sure if this will help or not, but I have provided RHEL 5 convenience builds of the proper version of 'mod_nss' at http://pki.fedoraproject.org/wiki/PKI_Download#Dogtag_Certificate_System_1.3.... -- Matt
with the On 5/7/2010 11:31 PM, Kevin Unthank wrote:
Hi Henry,
What version on mod_nss do you have? We have not tested the dogtag 1.3 pki-ra and pki-tps subsystems on RHEL/Centos because they require a later version (1.0.8) of mod_nss than the standard.
Details on this and other issues can be found on the wiki: http://pki.fedoraproject.org/wiki/PKI_Known_Issues
You might be able to make it work by forcing and install of the fedora 12 mod_nss libraries onto your RHEL/Centos box
Cheers, Kev
On 05/06/2010 10:07 PM, Henry GM wrote:
Dear all,
Why pki-ra port not up after i install using yum --enablerepo=epel-testing install pki-ra ? For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration running well and port up.
[2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links for '/var/lib/pki-ra' ... [2010-05-07 11:47:05] [debug] Processing PKI security databases for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Processing PKI security modules for '/var/lib/pki-ra' ... [2010-05-07 11:47:07] [debug] Attempting to add hardware security modules to system if applicable ... [2010-05-07 11:47:07] [debug] module name: lunasa lib: /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] module name: nfast lib: /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST! [2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki [2010-05-07 11:47:07] [debug] Restorecon file context for /var/lib/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /var/log/pki-ra [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra [2010-05-07 11:47:08] [debug] Restorecon file context for /usr/sbin/httpd.worker [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for 12890
PKI instance creation completed ...
Stopping pki-ra: httpd (no pid file) not running [ OK ] ============================== Starting pki-ra: ............................... [ OK ]
pki-ra pid file exists but is empty Before proceeding with the configuration, make sure the firewall settings of this machine permit proper access to this subsystem.
Please start the configuration by accessing:
https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyMuxO...
After configuration, the server can be operated by the command:
/sbin/service pki-rad restart pki-ra
from /var/log/pki-ra/error.log i got messages : /usr/sbin/httpd.worker: symbol lookup error: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so:
undefined symbol: ap_get_server_banner
perl -v This is perl, v5.8.8 built for i386-linux-thread-multi
How to fix that ?
Rgds, Henry G.
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
On 5/8/2010 6:40 AM, Matthew Harmsen wrote:
On 05/07/10 16:19, Henry GM wrote:
Kevin,
Thanks for advise, i was upgrade the default mod_nss 1.0.3-8.el5 for Centos 5 with http://yum.aclub.net/pub/linux/centos/5/umask/umask.repo so at my centos have mod_nss.i386 0:1.0.7-umask.4 This not working now with pki-ra As you advice to replace using mod_nss-1.0.8-2.fc12.i686.rpm i already try it and got problem because rpmlib(FileDigests) <= 4.6.0-1 is needed by mod_nss-1.0.8-2.fc12.i686 rpmlib(PayloadIsXz) <= 5.2-1 is needed by mod_nss-1.0.8-2.fc12.i686.... i cant find sources for rpmlib or rpm-devel.. maybe i must change centos 5.4 to fedora 12. or any idea to make mod_nss-1.0.8-2.fc12.i686 work for centos 5.4 ?
Rgds, Henry Gultom
Henry,
Not sure if this will help or not, but I have provided RHEL 5 convenience builds of the proper version of 'mod_nss' at http://pki.fedoraproject.org/wiki/PKI_Download#Dogtag_Certificate_System_1.3....
-- Matt
Really help Matt, Its work now,so im not reload my centos to fedora #wget -c http://pki.fedoraproject.org/pki/download/pki/1.3.0/el5/RPMS/i386/mod_nss-1.... #rpm -ivh mod_nss-1.0.8-2.el5idm.i386.rpm #rpm -qa mod_nss mod_nss-1.0.8-2.el5idm after install and pkicreate, pki-ra port 12890 show up now,this case solve. Thanks Kevin and Matt, Henry Gultom,
participants (3)
-
Henry GM -
Kevin Unthank -
Matthew Harmsen