[Pki-users] pki-ra port 12890 not up

[Henry GM]

Kevin,

Thanks for advise,
i was upgrade the default mod_nss 1.0.3-8.el5 for Centos 5 with 
http://yum.aclub.net/pub/linux/centos/5/umask/umask.repo
so at my centos have mod_nss.i386 0:1.0.7-umask.4  This not working now 
with pki-ra
As you advice to replace using mod_nss-1.0.8-2.fc12.i686.rpm i already 
try it and got problem
because  rpmlib(FileDigests) <= 4.6.0-1 is needed by 
mod_nss-1.0.8-2.fc12.i686 rpmlib(PayloadIsXz) <= 5.2-1 is needed by 
mod_nss-1.0.8-2.fc12.i686....
i cant find sources for rpmlib or rpm-devel..
maybe i must change centos 5.4 to fedora 12. or any idea to make 
mod_nss-1.0.8-2.fc12.i686 work for centos 5.4 ?

Rgds,
Henry Gultom


with the
On 5/7/2010 11:31 PM, Kevin Unthank wrote:
> Hi Henry,
>
> What version on mod_nss do you have? We have not tested the dogtag 1.3
> pki-ra and pki-tps subsystems on RHEL/Centos because they require a
> later version (1.0.8) of mod_nss than the standard.
>
> Details on this and other issues can be found on the wiki:
> http://pki.fedoraproject.org/wiki/PKI_Known_Issues
>
> You might be able to  make it work by forcing and install of the
> fedora 12 mod_nss libraries onto your RHEL/Centos box
>
> Cheers,
> Kev
>
>
> On 05/06/2010 10:07 PM, Henry GM wrote:
>> Dear all,
>>
>> Why pki-ra port not  up after i install using yum
>> --enablerepo=epel-testing install pki-ra ?
>> For pki-ca,pki-kra,pki-ocsp,pki-tps install and start configuration
>> running well and port up.
>>
>> [2010-05-07 11:47:05] [debug] Processing PKI files and symbolic links
>> for '/var/lib/pki-ra' ...
>> [2010-05-07 11:47:05] [debug] Processing PKI security databases for
>> '/var/lib/pki-ra' ...
>> [2010-05-07 11:47:07] [debug] Processing PKI security modules for
>> '/var/lib/pki-ra' ...
>> [2010-05-07 11:47:07] [debug]     Attempting to add hardware security
>> modules to system if applicable ...
>> [2010-05-07 11:47:07] [debug]         module name: lunasa  lib:
>> /usr/lunasa/lib/libCryptoki2.so DOES NOT EXIST!
>> [2010-05-07 11:47:07] [debug]         module name: nfast  lib:
>> /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST!
>> [2010-05-07 11:47:07] [debug] Restorecon file context for /usr/share/pki
>> [2010-05-07 11:47:07] [debug] Restorecon file context for 
>> /var/lib/pki-ra
>> [2010-05-07 11:47:08] [debug] Restorecon file context for 
>> /var/log/pki-ra
>> [2010-05-07 11:47:08] [debug] Restorecon /etc/pki-ra
>> [2010-05-07 11:47:08] [debug] Restorecon file context for
>> /usr/sbin/httpd.worker
>> [2010-05-07 11:47:08] [debug] Setting selinux context pki_ra_port_t for
>> 12890
>>
>> PKI instance creation completed ...
>>
>> Stopping pki-ra: httpd (no pid file) not running
>>                                                             [  OK  ]
>> ==============================
>> Starting pki-ra: ...............................           [  OK  ]
>>
>> pki-ra pid file exists but is empty
>> Before proceeding with the configuration, make sure
>> the firewall settings of this machine permit proper
>> access to this subsystem.
>>
>> Please start the configuration by accessing:
>>
>> https://mydomain.com:12890/ra/admin/console/config/login?pin=jGRSfY5xWWyMuxO2cSke 
>>
>>
>> After configuration, the server can be operated by the command:
>>
>>      /sbin/service pki-rad restart pki-ra
>>
>> from /var/log/pki-ra/error.log i got messages :
>> /usr/sbin/httpd.worker: symbol lookup error:
>> /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Apache2/ServerUtil/ServerUtil.so: 
>>
>> undefined symbol: ap_get_server_banner
>>
>> perl -v
>> This is perl, v5.8.8 built for i386-linux-thread-multi
>>
>> How to fix that ?
>>
>> Rgds,
>> Henry G.