[Pki-users] Re: [Dogtag 1.0]

[Christina Fu]

Hi Arshad,

Welcome to Dogtag!!
The message "CA response: Authorization Error. Please also check 
previous related panels" is an indication that there is a problem 
between RA to CA communication.
There are two places to trouble shoot.
One is in the RA debug log, where, from the bottom of the log, you want 
to look for string "NamePanel: response content=" and see what the 
content value is.  It should contain a non-zero return value from CA.  A 
zero response means success.
The other place is the CA debug log, where you might want to search for 
key word "profileSubmit" starting from the bottom of the log, and then 
scroll down slowly to find any error message relating to the 
authentication error.

I believe the cookie has a timeout period, so if you waited too long in 
the middle of the installation of the RA, you would get an 
authentication error.

Hope this helps.  Let me know how it goes.

Christina
>
>
> -------- Original Message --------
> Subject: Dogtag 1.0
> Date: Wed, 19 Mar 2008 18:44:07 -0700
> From: Arshad Noor <arshad.noor at strongauth.com>
> Organization: StrongAuth, Inc.
> To: pki-users at redhat.com, pki-devel at redhat.com
>
> Congratulations to the Dogtag team for finally open-sourcing
> the product.  Its a welcome addition to the open-source
> community.  Its been a long time coming, but better late than
> never. :-)
>
> Question:  In configuring the RA (after successfully setting
> up the CA on 2.6.24.3-34.fc8 #1 SMP x86_64) there is an error
> when trying to proceed past the "Subject Names" panel:
>
> "CA response: Authorization Error. Please also check previous related
> panels."
>
> Any explanation of what went wrong?  There doesn't appear to be
> any errors in the error_log or debug files, but there is a small
> ra-debug.log which shows an "Authentication Error".
>
> The only authentication credential I recall the wizard prompted
> for was for the CA administrator ID (which was correct since the
> cookie got established and I was able to proceed this far).
>
> TIA.
>
> Arshad Noor
> StrongAuth, Inc.
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3225 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/pki-users/attachments/20080328/8aeec7ed/attachment.bin>