[Pki-users] pki-ra port 12890 not up

[Matthew Harmsen]

On 05/07/10 16:19, Henry GM wrote:
> Kevin,
>
> Thanks for advise,
> i was upgrade the default mod_nss 1.0.3-8.el5 for Centos 5 with 
> http://yum.aclub.net/pub/linux/centos/5/umask/umask.repo
> so at my centos have mod_nss.i386 0:1.0.7-umask.4  This not working 
> now with pki-ra
> As you advice to replace using mod_nss-1.0.8-2.fc12.i686.rpm i already 
> try it and got problem
> because  rpmlib(FileDigests) <= 4.6.0-1 is needed by 
> mod_nss-1.0.8-2.fc12.i686 rpmlib(PayloadIsXz) <= 5.2-1 is needed by 
> mod_nss-1.0.8-2.fc12.i686....
> i cant find sources for rpmlib or rpm-devel..
> maybe i must change centos 5.4 to fedora 12. or any idea to make 
> mod_nss-1.0.8-2.fc12.i686 work for centos 5.4 ?
>
> Rgds,
> Henry Gultom
>
Henry,

Not sure if this will help or not, but I have provided RHEL 5 
convenience builds of the proper version of 'mod_nss' at 
http://pki.fedoraproject.org/wiki/PKI_Download#Dogtag_Certificate_System_1.3_and_later.

-- Matt
>
> with the
> On 5/7/2010 11:31 PM, Kevin Unthank wrote:
>> Hi Henry,
>>
>> What version on mod_nss do you have? We have not tested the dogtag 1.3
>> pki-ra and pki-tps subsystems on RHEL/Centos because they require a
>> later version (1.0.8) of mod_nss than the standard.
>>
>> Details on this and other issues can be found on the wiki:
>> http://pki.fedoraproject.org/wiki/PKI_Known_Issues
>>
>> You might be able to  make it work by forcing and install of the
>> fedora 12 mod_nss libraries onto your RHEL/Centos box
>>
>> Cheers,
>> Kev
>>
>>
>> On 05/06/2010 10:07 PM, Henry GM wrote:
>>> Dear all,
>>>
>>> Why pki-ra port not  up after i install using yum
>>> --enablerepo=epel-testing install pki-ra ?
>>> For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration
>>> running well and port up.
>>>
>>> [2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links
>>> for '/var/lib/pki-ra' ...
>>> [2010-05-07 11:47:05] [debug] Processing PKI security databases for
>>> '/var/lib/pki-ra' ...
>>> [2010-05-07 11:47:07] [debug] Processing PKI security modules for
>>> '/var/lib/pki-ra' ...
>>> [2010-05-07 11:47:07] [debug]     Attempting to add hardware security
>>> modules to system if applicable ...
>>> [2010-05-07 11:47:07] [debug]         module name: lunasa  lib:
>>> /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST!
>>> [2010-05-07 11:47:07] [debug]         module name: nfast  lib:
>>> /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST!
>>> [2010-05-07 11:47:07] [debug] Restorecon file context for 
>>> /usr/share/pki
>>> [2010-05-07 11:47:07] [debug] Restorecon file context for 
>>> /var/lib/pki-ra
>>> [2010-05-07 11:47:08] [debug] Restorecon file context for 
>>> /var/log/pki-ra
>>> [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra
>>> [2010-05-07 11:47:08] [debug] Restorecon file context for
>>> /usr/sbin/httpd.worker
>>> [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for
>>> 12890
>>>
>>> PKI instance creation completed ...
>>>
>>> Stopping pki-ra: httpd (no pid file) not running
>>>                                                             [  OK  ]
>>> ==============================
>>> Starting pki-ra: ...............................           [  OK  ]
>>>
>>> pki-ra pid file exists but is empty
>>> Before proceeding with the configuration, make sure
>>> the firewall settings of this machine permit proper
>>> access to this subsystem.
>>>
>>> Please start the configuration by accessing:
>>>
>>> https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyMuxO2cSke 
>>>
>>>
>>> After configuration, the server can be operated by the command:
>>>
>>>      /sbin/service pki-rad restart pki-ra
>>>
>>> from /var/log/pki-ra/error.log i got messages :
>>> /usr/sbin/httpd.worker: symbol lookup error:
>>> /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so: 
>>>
>>> undefined symbol: ap_get_server_banner
>>>
>>> perl -v
>>> This is perl, v5.8.8 built for i386-linux-thread-multi
>>>
>>> How to fix that ?
>>>
>>> Rgds,
>>> Henry G.
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6654 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/pki-users/attachments/20100507/80c01597/attachment.p7s>