[Fedora-directory-users] Re: Recurring NSS initialization failure...

Richard Megginson rmeggins at redhat.com
Tue Jun 26 14:30:07 UTC 2007


Saied W. Andalib wrote:
> After the clean re-installation, I tried to do the setup, but, it fails
> with the same error:
>
>
>
> [slapd-dirs]: [26/Jun/2007:09:03:00 -0500] - SSL alert: Security
> Initialization: NSS initialization failed (Netscape Portable Runtime
> error -8174 - security library: bad database.):
> path: /opt/fedora-ds/alias/, certdb prefix: slapd-dirs-, keydb prefix:
> slapd-dirs-. [slapd-dirs]: [26/Jun/2007:09:03:00 -0500] - ERROR: NSS
> Initialization Failed. error:[26/Jun/2007:09:03:00 -0500] - ERROR: NSS
> Initialization\nFailed. system_errno:2
>   
Try this as root: cd /opt/fedora-ds/alias ; su fedora-ds -c 
"../shared/bin/certutil -N -d . -P slapd-dirs-"
>
>
> Where it hangs. The alias directory has only one entry:
>
>
>
> [root at dirs fedora-ds]# ls -al alias/
> total 268
> drwxr-xr-x  2 fedora-ds fedora-ds   4096 Jun 13 12:01 .
> drwxr-xr-x 15 root      root        4096 Jun 26 09:03 ..
> -rwxr-xr-x  1 root      root      247376 Nov  8  2006 libnssckbi.so
>
>
>
> It didn't create the other cert and key files under alias directory.
> Also, the admin-serv/config directory is empty!
>   
Admin server depends on directory server to complete setup.
> That NSS Initialization failure (-8174) with "bad database" error
> prevents the setup from doing anything. Since, this is a fresh
> installation, I think the bad database error is probably somewhere
> outside the /opt/fedora-ds tree...!
No, it's not.  There is something really weird going on.  The system 
error above is 2, which is
#define ENOENT           2      /* No such file or directory */
I'm not sure what file or directory it is complaining about.  The 
directory server is supposed to create the key/cert db if they do not 
exist.  The directory names and permissions all look correct.
> I'm only guessing at this point;-)
> Any ideas as to where to look for any clues?!!!!
>
> SWA
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20070626/4c595af0/attachment.bin>


More information about the Fedora-directory-users mailing list