[Pki-users] Cloning CA

[Jindrich Dolezal]

additional info:
on the master ca machine i found following in the log file:

[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet:service() uri = 
/ca/ee/ca/updateNumberRange
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet::service() param 
name='type' value='request'
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet::service() param 
name='xmlOutput' value='true'
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet::service() param 
name='sessionID' value='-1411012119543770863'
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet: caUpdateNumberRange 
start to service.
[18/Feb/2014:14:00:19][http-9444-2]: UpdateNumberRange: processing...
[18/Feb/2014:14:00:19][http-9444-2]: UpdateNumberRange process: 
authentication starts
[18/Feb/2014:14:00:19][http-9444-2]: IP: 10.10.16.73
[18/Feb/2014:14:00:19][http-9444-2]: AuthMgrName: TokenAuth
[18/Feb/2014:14:00:19][http-9444-2]: CMSServlet: no client certificate found
[18/Feb/2014:14:00:19][http-9444-2]: TokenAuthentication: start
[18/Feb/2014:14:00:19][http-9444-2]: TokenAuthentication: 
content=sessionID=-1411012119543770863&hostname=10.10.16.73
[18/Feb/2014:14:00:19][http-9444-1]: CMSServlet:service() uri = 
/ca/ee/ca/tokenAuthenticate
[18/Feb/2014:14:00:19][http-9444-1]: CMSServlet::service() param 
name='hostname' value='10.10.16.73'
[18/Feb/2014:14:00:19][http-9444-1]: CMSServlet::service() param 
name='sessionID' value='-1411012119543770863'
[18/Feb/2014:14:00:19][http-9444-1]: CMSServlet: caTokenAuthenticate 
start to service.
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication: 
sessionId=-1411012119543770863
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication: 
givenHost=10.10.16.73
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication: checking 
session in the session table
[18/Feb/2014:14:00:19][http-9444-1]: CMSEngine: getPasswordStore(): 
password store initialized before.
[18/Feb/2014:14:00:19][http-9444-1]: CMSEngine: getPasswordStore(): 
password store initialized.
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication: session not found
[18/Feb/2014:14:00:19][http-9444-1]: TokenAuthentication authenticate 
failed, session id does not exist.
[18/Feb/2014:14:00:19][http-9444-2]: TokenAuthentication: status=1
[18/Feb/2014:14:00:19][http-9444-2]: SignedAuditEventFactory: create() 
message=[AuditEvent=AUTH_FAIL][SubjectID=$Unidentified$][Outcome=Failure][AuthMgr=TokenAuth][AttemptedCred=$Unidentified$] 
authentication failure




On 02/18/2014 02:47 PM, Jindrich Dolezal wrote:
> hi,
>
> im using dogtag 9.0 (pki-ca-9.0.3) on rhel 6.2 and want to make clone. 
> i'm following 'Deploy and Install guide' chapter 10.3. So have master 
> ca, created clone ca and run the configuration wizard. i got to point 
> (point 10) where i am supposed to "Import Keys and Certificates". 
> After filling p12 file and password i ended with:
>
> " org.xml.sax.SAXParseException; lineNumber: 2; columnNumber: 15; Open 
> quote is expected for attribute "BGCOLOR" associated with an element 
> type "BODY"."
>
> error appearing on the page (see attached picture).
> Note that when i fill incorrect file or invalid passord, the wizard 
> tells me with appropriate error (like no such file/...) but when 
> everything is correct SAX exception appears. SAX exception also 
> appears when i left the inputs blank and click next => therefore this 
> step is unpassable.
>
> has anyone performed cloning with success?
>
> thanks,
>
> jd
>
>
> </pre>****************************************************************************************<br>This 
> email and any files transmitted with are confidential and intended 
> solely for the<br>use of the individual or entity to whom they are 
> addressed.  If you have received this<br>email in error then please 
> delete it and notify the sender. Do not make a copy or forward<br>it 
> to anyone.  This footnote also confirms that this email message has 
> been swept for the<br>presence of computer viruses.<br><br>Adaptive 
> Mobile Security Ltd, Ferry House, 48 Lower Mount Street, Dublin 2, 
> Ireland<br>Directors: B. Collins, G. Maclachlan (UK), N. Grierson 
> (UK), J. Ennis (UK), D. Summers (UK).<br>Registered in Ireland, 
> Company No. 370343, VAT 
> Reg.No.IE6390343O<br>****************************************************************************************</pre>
>
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users

</pre>****************************************************************************************<br>This email and any files transmitted with are confidential and intended solely for the<br>use of the individual or entity to whom they are addressed.  If you have received this<br>email in error then please delete it and notify the sender. Do not make a copy or forward<br>it to anyone.  This footnote also confirms that this email message has been swept for the<br>presence of computer viruses.<br><br>Adaptive Mobile Security Ltd, Ferry House, 48 Lower Mount Street, Dublin 2, Ireland<br>Directors: B. Collins, G. Maclachlan (UK), N. Grierson (UK), J. Ennis (UK), D. Summers (UK).<br>Registered in Ireland, Company No. 370343, VAT Reg.No.IE6390343O<br>****************************************************************************************</pre>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20140218/46081da1/attachment.htm>