[Pki-users] yum install pki-ca - and problem :(

[Erwin Himawan]

I experienced the same install issue.  Here is what you have to do.

When you run your "yum install pki-ca" in the first place, observe the 
version of pki-related dependencies; i.e. pkiconsole, pki-ca, dogtag*
I believe when you do this yum install, yum accidently picks up 1.3.0 
version, except the pki-ca.

In order to confirm this mixed version, you can do "yum list | grep pki | 
grep installed"
This will list the version and pki-related packages and notice the mixed of 
1.2.0 and 1.3.0 versions.

To ensure version consistency, you can either all 1.2.0 version or 1.30 
version.  I personally keep the 1.3.0 version.
To keep the 1.3.0 version, do "yum erase pki-ca" and other pki and dogtag 
packages belonging to 1.2.0 version.
After you erase all the 1.2.0 version, do "yum list | grep pki | grep 
installed" again to ensure no 1.2.0 version package is installed.

Also, make sure that all dependencies have also been installed; I.e. the 
java, tomcat, etc.  If those dependencies are not installed yet,
I recommend you to install those packages separately.

Assuming the remainder of the pakcages are pki related and dogtag related, 
you can use the following command to install the 1.3.0 version.
Use "yum install pki-ca --enablerepo=updates-testing".  This command will 
pick up the 1.30 versions for pki and dogtag related packages.

Thanks to Kashyap for showing this, reff: 
https://www.redhat.com/archives/pki-users/2010-January/msg00016.html

When you do this, you might encounter error for which you want to check your 
/etc/yum.repos.d/fedora-updates-testing.repo
In this file make sure to uncomment the "base...." and comment the 
"mirrorlist....." for each section.

After you successfully install the pki-ca packages, you can proceed with 
pkicreate to create the ca instance.  Just type the pkicreate and it spits 
out the required parameters.  I sue default value.

Let me know if you need more help.  By the way, I have not created pki-ra 
yet; that's the next thing on my list.

By the way, when you configured your ca, make sure your directory server 
process is running; check using "ps -ef | grep dirsrv" (if you install your 
directory server locally).
Or, use /etc/init status | start | stop | restart.


Erwin



--------------------------------------------------
From: "Rafal Kaminski" <rafal.kaminski at blstream.com>
Sent: Monday, March 01, 2010 8:34 AM
To: <pki-users at redhat.com>
Subject: [Pki-users] yum install pki-ca - and problem :(

> Hi all,
>
> I install dogtag two months ago, and now I repeat that move, but ...
>
> When I use: yum install pki-ca
>
> I see:
>
> Installing : pki-common-1.3.0-7.fc11.noarch
> 156/158
> Installing : hal-info-20090414-1.fc11.noarch
> 157/158
> Adding default PKI group "pkiuser" to /etc/group.
> Adding default PKI user "pkiuser" to /etc/passwd.
> useradd: warning: the home directory already exists.
> Not copying any file from skel directory into it.
> Installing : pki-ca-1.2.0-4.fc11.noarch
> 158/158
> PKI instance creation Utility ...
>
> [2010-02-02 04:39:15] [error] create_symbolic_link(): illegal destination 
> path => /usr/share/java/ca.jar.
>
> Error detected would you like to clean up /var/lib/pki-ca (Y/N)?
> Error detected would you like to clean up /var/lib/pki-ca (Y/N)?
>
> Can sombody tell me why?
>
> BR,
>
> Rafal Kaminski
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users