[Freeipa-users] (no subject)

Jimmy g17jimmy at gmail.com
Fri Mar 16 18:22:39 UTC 2012


I'm up for that. I'm assuming the DogTag db is in
/var/lib/dirsrv/slapd-PKI-IPA/db/userRoot. Correct?

On Fri, Mar 16, 2012 at 1:38 PM, Simo Sorce <simo at redhat.com> wrote:
> On Fri, 2012-03-16 at 12:51 -0400, Rob Crittenden wrote:
>> Jimmy wrote:
>> > Here are the latest logs and info. Thanks. Jimmy
>>
>> What did you change to fix the ca_audit problem?
>>
>> There are two problems that I can see:
>>
>> 1. certmonger is failing because of SSL trust issues. Have you
>> changed
>> the NSS database(s) recently for Apache or 389-ds, or /etc/pki/nssdb?
>>
>> 2. Looks like there is some corruption in the dogtag LDAP instance
>> based
>> on all the entries not found.
>>
>>
> Maybe the dogtag instance also got problems during the 389ds upgrade ?
>
> Jimmy, maybe you can do the same dump to ldif restore procedure for the
> dogtag instance ?
>
> Simo.
>
> --
> Simo Sorce * Red Hat, Inc * New York
>




More information about the Freeipa-users mailing list