[Pki-users] How to completely remove all traces of pki subsystem

kashyap chamarthy kchamart at redhat.com
Tue Sep 8 13:13:40 UTC 2009


Rashmi Pawar wrote:
> Hi,
>  
> I tried using firefox for configuration but was not successfull.
>  
> As i got the error 46 on web browser and could not resolve the error 
> I uninstalled all the pki subsystems, again when i installed the pki 
> susbsytems say pki-ca a new instance file /var/log/pki-ca-install.log 
> was not created.. Please advice me how to completely remove all traces, 
> instances of pki-subsystems..as i tried pkiremove and pkicreate to 
> remove and create the instance and log file...but was unsuccessfull.

Though I'm not sure of the error 46 you're encountering,

- Also try to clean-up the Directory Server instance, (and later create a new one)
# remove-ds.pl -i slapd-foo
(-f can be passed as argument to force uninstall)

- Try doing a yum remove for the pki package dependencies,

- After that, try removing the below files..
/var/lib/pki* /var/log/pki* /etc/init.d/pki*

- Create a new firefox user profile (just to avoid any old subsystem certs in your browser)

HTH,
kashyap
>  
> Thanks.
>  
> Regards.
> Rsahmi
> 
> 
>  
> On Fri, Sep 4, 2009 at 6:36 PM, Chandrasekar Kannan <ckannan at redhat.com 
> <mailto:ckannan at redhat.com>> wrote:
> 
>     On 09/04/2009 02:16 AM, Rashmi Pawar wrote:
>>     Hi when i configured subsystem pki-ca i got he error "Error 46
>>     Cerendentials not generated"
>>     Please find the attached file that shows the error...
> 
>     I don't believe we support IE for the administration interface.
>     If possible, please try with firefox.
> 
> 
>>
>>     On Wed, Sep 2, 2009 at 8:57 AM, Rashmi Pawar
>>     <rashmeepawar at gmail.com <mailto:rashmeepawar at gmail.com>> wrote:
>>
>>         ok..
>>         thanks a lot...
>>
>>         On Wed, Sep 2, 2009 at 8:40 AM, Chandrasekar Kannan
>>         <ckannan at redhat.com <mailto:ckannan at redhat.com>> wrote:
>>
>>             On 09/01/2009 07:48 PM, Rashmi Pawar wrote:
>>>              
>>>              
>>>             Thank you Chandrasekar for your prompt and informative
>>>             response.
>>>              
>>>             I asked if apache or secure apache is required for dogtag
>>>             implementation because at the end of the web page
>>>             http://pki.fedoraproject.org/wiki/PKI_Runtime_Environments it
>>>             has been mentioned that RA and TPS subsystems require
>>>             Apache web server,
>>>             hence the question as to what all daemons and rpms need
>>>             to be installed and configured before starting installing
>>>             and configuring PKI subsytsems.
>>
>>             ah ok. yeah apache is required. but if you do
>>             yum -y install pki-tps pki-ra
>>
>>             yum will pull in and install all the dependencies for you.
>>             httpd - apache webserver is one of them.
>>
>>             no other action is required.
>>
>>
>>
>>>              
>>>              
>>>
>>>              
>>>             On Tue, Sep 1, 2009 at 10:43 PM, Chandrasekar Kannan
>>>             <ckannan at redhat.com <mailto:ckannan at redhat.com>> wrote:
>>>
>>>                 On 09/01/2009 09:43 AM, Rashmi Pawar wrote:
>>>>                  
>>>>                  
>>>>                 I want to install all the 6 PKI subsystems for
>>>>                 dogtag implementation,
>>>
>>>                 right. yum -y install pki-ca pki-tks pki-tps pki-ra
>>>                 pki-ocsp pki-kra
>>>                 is all you need to do. It will pull in httpd,tomcat5
>>>                 etc...
>>>
>>>
>>>>                 do i need to configure apache or secure apache.
>>>
>>>                 What is this for ?
>>>
>>>
>>>
>>>>                  
>>>>                 Thanks in advance.
>>>>                  
>>>>
>>>>
>>>>                  
>>>>                 On Mon, Aug 31, 2009 at 5:53 PM, Chandrasekar Kannan
>>>>                 <ckannan at redhat.com <mailto:ckannan at redhat.com>> wrote:
>>>>
>>>>                     On 08/31/2009 01:20 AM, Rashmi Pawar wrote:
>>>>>                     Hi Chandrasekar,
>>>>>                      
>>>>>                     Thank you for your reply.
>>>>>                     One quick question..As you said i dont need to
>>>>>                     install and run Apache if pki-tps and pki-ra
>>>>>                     subsystems are not installed...My question is
>>>>>                     even if i am not installing pki-ra and pki-tps
>>>>>                     subsystems can i still go with apache?
>>>>
>>>>                     can u explain what you will use apache for .. in
>>>>                     this case ?..
>>>>
>>>>>                      
>>>>>                     Regards,
>>>>>                     Rashmi Pawar
>>>>>                     On Sun, Aug 30, 2009 at 9:30 PM,
>>>>>                     <pki-users-request at redhat.com
>>>>>                     <mailto:pki-users-request at redhat.com>> wrote:
>>>>>
>>>>>                         Send Pki-users mailing list submissions to
>>>>>                                pki-users at redhat.com
>>>>>                         <mailto:pki-users at redhat.com>
>>>>>
>>>>>                         To subscribe or unsubscribe via the World
>>>>>                         Wide Web, visit
>>>>>                              
>>>>>                          https://www.redhat.com/mailman/listinfo/pki-users
>>>>>                         or, via email, send a message with subject
>>>>>                         or body 'help' to
>>>>>                                pki-users-request at redhat.com
>>>>>                         <mailto:pki-users-request at redhat.com>
>>>>>
>>>>>                         You can reach the person managing the list at
>>>>>                                pki-users-owner at redhat.com
>>>>>                         <mailto:pki-users-owner at redhat.com>
>>>>>
>>>>>                         When replying, please edit your Subject
>>>>>                         line so it is more specific
>>>>>                         than "Re: Contents of Pki-users digest..."
>>>>>
>>>>>
>>>>>                         Today's Topics:
>>>>>
>>>>>                           1. Dogtag Installation on FC6 (Rashmi Pawar)
>>>>>                           2. Re: Dogtag Installation on FC6
>>>>>                         (Chandrasekar Kannan)
>>>>>
>>>>>
>>>>>                         ----------------------------------------------------------------------
>>>>>
>>>>>                         Message: 1
>>>>>                         Date: Sun, 30 Aug 2009 13:42:01 +0530
>>>>>                         From: Rashmi Pawar <rashmeepawar at gmail.com
>>>>>                         <mailto:rashmeepawar at gmail.com>>
>>>>>                         Subject: [Pki-users] Dogtag Installation on FC6
>>>>>                         To: pki-users at redhat.com
>>>>>                         <mailto:pki-users at redhat.com>
>>>>>                         Message-ID:
>>>>>                              
>>>>>                          <816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com
>>>>>                         <mailto:816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com>>
>>>>>                         Content-Type: text/plain; charset="iso-8859-1"
>>>>>
>>>>>                         Hi
>>>>>
>>>>>                         I am new to the Dogtag Certificate system.
>>>>>                         I have to install the dogtag
>>>>>                         certificate system on fedora core 6. I
>>>>>                         would appreciate help from pki-users
>>>>>                         who have successfully installed and are
>>>>>                         runing dogtag certificate system on
>>>>>                         linux.
>>>>>                         I read the explanantion on dogtag on
>>>>>                         http://pki.fedoraproject.org/wiki/PKI_Main_Page
>>>>>                         yet I have some questions
>>>>>                         before starting the installation. Following
>>>>>                         are the questions:
>>>>>
>>>>>                         1. Do I have to install and run Apache
>>>>>                         service on the system on which I am
>>>>>                         going to implement dogtag?
>>>>>                         2. I am confused about the configuration of
>>>>>                         all the PKI subsystems like
>>>>>                         CA,RA,DRM...etc. In the
>>>>>                         http://pki.fedoraproject.org/wiki/PKI_Main_Page
>>>>>                         the
>>>>>                         configuration of all subsyems is given but
>>>>>                         I dont understand from where do I
>>>>>                         get the configuration URL for each subsystem.
>>>>>                         3. I have to integrate the setup with
>>>>>                         Checkpoint, so need steps on the
>>>>>                         integration.
>>>>>
>>>>>                         I would appreciate if someone who has
>>>>>                         implemented dogtag would provide me
>>>>>                         easy steps to install dogtag on fedora core 6.
>>>>>
>>>>>                         Thanks & Regards,
>>>>>                         Rashmi
>>>>>                         -------------- next part --------------
>>>>>                         An HTML attachment was scrubbed...
>>>>>                         URL:
>>>>>                         https://www.redhat.com/archives/pki-users/attachments/20090830/86c17a72/attachment.html
>>>>>
>>>>>                         ------------------------------
>>>>>
>>>>>                         Message: 2
>>>>>                         Date: Sun, 30 Aug 2009 07:30:03 -0700
>>>>>                         From: Chandrasekar Kannan
>>>>>                         <ckannan at redhat.com
>>>>>                         <mailto:ckannan at redhat.com>>
>>>>>                         Subject: Re: [Pki-users] Dogtag
>>>>>                         Installation on FC6
>>>>>                         To: Rashmi Pawar <rashmeepawar at gmail.com
>>>>>                         <mailto:rashmeepawar at gmail.com>>
>>>>>                         Cc: pki-users at redhat.com
>>>>>                         <mailto:pki-users at redhat.com>
>>>>>                         Message-ID: <4A9A8CEB.1080404 at redhat.com
>>>>>                         <mailto:4A9A8CEB.1080404 at redhat.com>>
>>>>>                         Content-Type: text/plain; charset="iso-8859-1"
>>>>>
>>>>>                         On 08/30/2009 01:12 AM, Rashmi Pawar wrote:
>>>>>                         > Hi
>>>>>                         > I am new to the Dogtag Certificate
>>>>>                         system. I have to install the
>>>>>                         > dogtag certificate system on fedora core
>>>>>                         6. I would appreciate help
>>>>>                         > from pki-users who have successfully
>>>>>                         installed and are runing dogtag
>>>>>                         > certificate system on linux.
>>>>>                         > I read the explanantion on dogtag on
>>>>>                         >
>>>>>                         http://pki.fedoraproject.org/wiki/PKI_Main_Page
>>>>>                         yet I have some
>>>>>                         > questions before starting the
>>>>>                         installation. Following are the questions:
>>>>>                         > 1. Do I have to install and run Apache
>>>>>                         service on the system on
>>>>>                         > which I am going to implement dogtag?
>>>>>
>>>>>                         not unless you need pki-tps or pki-ra
>>>>>                         subsystems. For pki-ca, pki-tks,
>>>>>                         pki-ocsp, pki-kra you just need tomcat5.
>>>>>
>>>>>                         > 2. I am confused about the configuration
>>>>>                         of all the PKI subsystems
>>>>>                         > like CA,RA,DRM...etc. In the
>>>>>                         >
>>>>>                         http://pki.fedoraproject.org/wiki/PKI_Main_Page
>>>>>                         the configuration of
>>>>>                         > all subsyems is given but I dont
>>>>>                         understand from where do I get the
>>>>>                         > configuration URL for each subsystem.
>>>>>
>>>>>                         for example, once you run yum install
>>>>>                         pki-ca, the rpm post install
>>>>>                         scripts run /usr/bin/pkicreate utility to
>>>>>                         create the default instance.
>>>>>                         Upon creation of this default instance,
>>>>>                         pkicreate spits out the url for
>>>>>                         configuration.
>>>>>
>>>>>
>>>>>                         > 3. I have to integrate the setup with
>>>>>                         Checkpoint, so need steps on the
>>>>>                         > integration.
>>>>>                         no idea.
>>>>>
>>>>>                         > I would appreciate if someone who has
>>>>>                         implemented dogtag would provide
>>>>>                         > me easy steps to install dogtag on fedora
>>>>>                         core 6.
>>>>>                         > Thanks & Regards,
>>>>>                         > Rashmi
>>>>>                         >
>>>>>                         ------------------------------------------------------------------------
>>>>>                         >
>>>>>                         >
>>>>>                         _______________________________________________
>>>>>                         > Pki-users mailing list
>>>>>                         > Pki-users at redhat.com
>>>>>                         <mailto:Pki-users at redhat.com>
>>>>>                         >
>>>>>                         https://www.redhat.com/mailman/listinfo/pki-users
>>>>>                         >
>>>>>
>>>>>                         -------------- next part --------------
>>>>>                         An HTML attachment was scrubbed...
>>>>>                         URL:
>>>>>                         https://www.redhat.com/archives/pki-users/attachments/20090830/573d26cb/attachment.html
>>>>>
>>>>>                         ------------------------------
>>>>>
>>>>>                         _______________________________________________
>>>>>                         Pki-users mailing list
>>>>>                         Pki-users at redhat.com
>>>>>                         <mailto:Pki-users at redhat.com>
>>>>>                         https://www.redhat.com/mailman/listinfo/pki-users
>>>>>
>>>>>
>>>>>                         End of Pki-users Digest, Vol 18, Issue 6
>>>>>                         ****************************************
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>>
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users




More information about the Pki-users mailing list