I am testing upgrading from 1.3.4.0-21.el7_2 to 1.3.4.0-26.el7_2. After the upgrade, I have noticed that "Manage Certificates" no longer works in the admin console. I receive the following error: "NSS shutdown failed: error -8038:unknown."
After doing some additional testing, it appears that just running "setup-ds-admin.pl -u" is sufficient to cause this problem, even without upgrading the 389 packages using yum update. Has anyone else run into this problem?
Thanks, Eric
Eric Torgersen Senior Systems Analyst Information Technology Services 518-250-9725
An update on this... after more investigation the cause seems to be that setup-ds-admin.pl -u changes the ownership of the key3.db and cert8.db files in /etc/dirsrv/admin-serv to root, rather than the user that the admin server is set to run as. Changing the ownership of these back fixes the problem.
Eric Torgersen Senior Systems Analyst Information Technology Services 518-250-9725
-----Original Message----- From: Torgersen, Eric A [mailto:etorgersen@albany.edu] Sent: Tuesday, February 23, 2016 3:44 PM To: General discussion list for the 389 Directory server project. Subject: [389-users] "manage certificates" broken in admin console after running setup-ds-admin.pl -u
I am testing upgrading from 1.3.4.0-21.el7_2 to 1.3.4.0-26.el7_2. After the upgrade, I have noticed that "Manage Certificates" no longer works in the admin console. I receive the following error: "NSS shutdown failed: error -8038:unknown."
After doing some additional testing, it appears that just running "setup-ds-admin.pl -u" is sufficient to cause this problem, even without upgrading the 389 packages using yum update. Has anyone else run into this problem?
Thanks, Eric
Eric Torgersen Senior Systems Analyst Information Technology Services 518-250-9725
-- 389 users mailing list 389-users@%(host_name)s http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
Thank you for your update.
It looks you hit this bug. https://fedorahosted.org/389/ticket/48409
Sorry for the inconvenience.
On 02/24/2016 08:20 AM, Torgersen, Eric A wrote:
An update on this... after more investigation the cause seems to be that setup-ds-admin.pl -u changes the ownership of the key3.db and cert8.db files in /etc/dirsrv/admin-serv to root, rather than the user that the admin server is set to run as. Changing the ownership of these back fixes the problem.
Eric Torgersen Senior Systems Analyst Information Technology Services 518-250-9725
-----Original Message----- From: Torgersen, Eric A [mailto:etorgersen@albany.edu] Sent: Tuesday, February 23, 2016 3:44 PM To: General discussion list for the 389 Directory server project. Subject: [389-users] "manage certificates" broken in admin console after running setup-ds-admin.pl -u
I am testing upgrading from 1.3.4.0-21.el7_2 to 1.3.4.0-26.el7_2. After the upgrade, I have noticed that "Manage Certificates" no longer works in the admin console. I receive the following error: "NSS shutdown failed: error -8038:unknown."
After doing some additional testing, it appears that just running "setup-ds-admin.pl -u" is sufficient to cause this problem, even without upgrading the 389 packages using yum update. Has anyone else run into this problem?
Thanks, Eric
Eric Torgersen Senior Systems Analyst Information Technology Services 518-250-9725
-- 389 users mailing list 389-users@%(host_name)s http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org -- 389 users mailing list 389-users@%(host_name)s http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
389-users@lists.fedoraproject.org
-
Noriko Hosoi -
Torgersen, Eric A