Re: [Fedora-directory-users] slapi search internal errors popping up in error log

[Rich Megginson]

Richard Hesse wrote:
>  Nothing really informative in the admin server logs. Just the
> 500's being recorded:
>
>  10.69.66.9 - cn=directory manager [08/Oct/2007:17:51:56 +0000] "POST
> /admin-serv/tasks/configuration/SecurityOp HTTP/1.0" 500 620
>     
ps -ef|grep httpd
ls -al /opt/fedora-ds/admin-serv/logs /opt/fedora-ds/admin-serv/config
# do the following only after obscuring any sensitive data
cat /opt/fedora-ds/shared/config/dbswitch.conf
cat /opt/fedora-ds/admin-serv/config/adm.conf
>  -richard
>
>  -----Original Message-----
>  From: fedora-directory-users-bounces(a)redhat.com
> [mailto:[e-mail]] On Behalf Of Richard Megginson
>  Sent: Monday, October 08, 2007 11:09 AM
>  To: General discussion list for the Fedora Directory server project.
>  Subject: Re: [Fedora-directory-users] slapi search internal errors popping up in error
> log
>
>  Richard Hesse wrote:
>    
> > No, we're not using client certs but that doesn't preclude someone using
> their own certs.
> >
> > No certmap.conf in the instance directory and it looks like the shared one is stock:
> > cat certmap.conf | grep -v "#"
> > certmap default         default
> >
> > The error from the configuration tab is just a generic 500. No additional text in the
> dialog nor in the logs.
> >
> >     
>  Check the admin server access and error log - /opt/fedora-ds/admin-serv/logs
>    
> > Alias directory:
> > drwxr-xr-x  2 nobody nobody   4096 Oct  8 17:42 .
> > drwxr-xr-x 15 root   root     4096 Oct  8 17:42 ..
> > -rwxr-xr-x  1 root   nobody 347368 Oct  6 00:22 libnssckbi.so
> > -rw-------  1 nobody nobody  16384 Oct  6 00:24 secmod.db
> > -rw-------  1 nobody nobody  65536 Oct  6 00:22 slapd-fds-cert8.db
> > -rw-------  1 nobody nobody  16384 Oct  6 00:22 slapd-fds-key3.db
> > -r--------  1 nobody nobody     41 Oct  6 00:22 slapd-fds-pin.txt
> >
> >
> > Thanks in advance.
> >
> > -richard
> >
> > -----Original Message-----
> > From: fedora-directory-users-bounces(a)redhat.com
> > [mailto:[e-mail]] On Behalf Of
> > Richard Megginson
> > Sent: Saturday, October 06, 2007 1:46 PM
> > To: General discussion list for the Fedora Directory server project.
> > Subject: Re: [Fedora-directory-users] slapi search internal errors
> > popping up in error log
> >
> > Richard Hesse wrote:
> >
> >     
> >> [06/Oct/2007:00:24:51 +0000] - slapi_search_internal
> >> ("CN=fds1.sv.powerset.com, OU=Domain Control Validated,
> >> O=fds1.sv.powerset.com", subtree, objectclass=*) err 32
> >>
> >>
> >>
> >> I'm guessing that this is cert related, but the TLS/SSL operations
> >> are working fine.
> >>
> >>
> >>       
> > Are you using client cert based authentication?
> >
> > cat /opt/fedora-ds/slapd-instance/config/certmap.conf
> > /opt/fedora-ds/shared/config/certmap.conf
> >
> >     
> >> However, I noticed that I can no longer view the encryption tab for
> >> this server in the console.
> >>
> >>
> >>       
> > What error do you get when you try to view the encryption tab?
> >
> > ls -al /opt/fedora-ds/alias
> >
> >     
> >> Any ideas what this error means or how to fix it?
> >>
> >>
> >>
> >> Thanks.
> >>
> >>
> >>
> >> -richard
> >>
> >> ---------------------------------------------------------------------
> >> -
> >> --
> >>
> >> --
> >> Fedora-directory-users mailing list
> >> Fedora-directory-users(a)redhat.com
> >> https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>
> >>
> >>       
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users(a)redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> >     
>
>
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>