[Pki-users] pki-ra port 12890 not up

[Kevin Unthank]

Hi Henry,

What version on mod_nss do you have? We have not tested the dogtag 1.3
pki-ra and pki-tps subsystems on RHEL/Centos because they require a
later version (1.0.8) of mod_nss than the standard.

Details on this and other issues can be found on the wiki:
http://pki.fedoraproject.org/wiki/PKI_Known_Issues

You might be able to  make it work by forcing and install of the
fedora 12 mod_nss libraries onto your RHEL/Centos box

Cheers,
Kev


On 05/06/2010 10:07 PM, Henry GM wrote:
> Dear all,
>
> Why pki-ra port not  up after i install using yum
> --enablerepo=epel-testing install pki-ra ?
> For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration
> running well and port up.
>
> [2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links
> for '/var/lib/pki-ra' ...
> [2010-05-07 11:47:05] [debug] Processing PKI security databases for
> '/var/lib/pki-ra' ...
> [2010-05-07 11:47:07] [debug] Processing PKI security modules for
> '/var/lib/pki-ra' ...
> [2010-05-07 11:47:07] [debug]     Attempting to add hardware security
> modules to system if applicable ...
> [2010-05-07 11:47:07] [debug]         module name: lunasa  lib:
> /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST!
> [2010-05-07 11:47:07] [debug]         module name: nfast  lib:
> /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST!
> [2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki
> [2010-05-07 11:47:07] [debug] Restorecon file context for /var/lib/pki-ra
> [2010-05-07 11:47:08] [debug] Restorecon file context for /var/log/pki-ra
> [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra
> [2010-05-07 11:47:08] [debug] Restorecon file context for
> /usr/sbin/httpd.worker
> [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for
> 12890
>
> PKI instance creation completed ...
>
> Stopping pki-ra: httpd (no pid file) not running
>                                                             [  OK  ]
> ==============================
> Starting pki-ra: ...............................           [  OK  ]
>
> pki-ra pid file exists but is empty
> Before proceeding with the configuration, make sure
> the firewall settings of this machine permit proper
> access to this subsystem.
>
> Please start the configuration by accessing:
>
> https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyMuxO2cSke
>
> After configuration, the server can be operated by the command:
>
>      /sbin/service pki-rad restart pki-ra
>
> from /var/log/pki-ra/error.log i got messages :
> /usr/sbin/httpd.worker: symbol lookup error:
> /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so:
> undefined symbol: ap_get_server_banner
>
> perl -v
> This is perl, v5.8.8 built for i386-linux-thread-multi
>
> How to fix that ?
>
> Rgds,
> Henry G.
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users