[Fedora-directory-users] NSS/SSL oddities

[Mark McLoughlin]

On Fri, 2006-01-06 at 07:57 -0700, Richard Megginson wrote:

> >  - Unless /opt/fedora-ds/alias is owned by nobody:nobody you get 
> >
> >[05/Jan/2006:17:43:40 +0000] - SSL alert: Security Initialization: NSS initialization failed (Netscape Portable Runtime error -8192 - An I/O error occurred during security authorization.): path: /opt/fedora-ds/alias/, certdb prefix: slapd-foo-, keydb prefix: slapd-foo-.
> >[05/Jan/2006:17:43:40 +0000] - ERROR: NSS Initialization Failed.
> >
> >    Couldn't we not make the directory owned by nobody:nobody by 
> >    default in the RPM? root:root doesn't seem like a useful default.
> >  
> >
> Yes, and it should be nobody:nobody - the setup script for FDS 1.0.1 
> should be setting that directory to be owned by nobody:nobody.  Did you 
> run setup after installing FDS 1.0.1? 

	No, I'm not using the setup script.

> We're currently revamping the RPM installation.

	Excellent; is the work-in-progress available anywhere for people to
poke at?

Cheers,
Mark.