Koji Web User Login Auth problem

[Linul]

Hi..

I have already setup my koji-cli、 kojid、koji-hub、koji-web、kojira, and test
ok,but still have a problem,it is web UI login

I have already import the cert. when I login the Web UI, the messages is：

Mod_python error: "PythonHandler mod_python.publisher"

Traceback (most recent call last):

  File "/usr/lib/python2.4/site-packages/mod_python/apache.py", line
299, in HandlerDispatch
    result = object(req)

  File "/usr/lib/python2.4/site-packages/mod_python/publisher.py",
line 213, in handler
    published = publish_object(req, object)

  File "/usr/lib/python2.4/site-packages/mod_python/publisher.py",
line 412, in publish_object
    return publish_object(req,util.apply_fs_data(object, req.form, req=req))

  File "/usr/lib/python2.4/site-packages/mod_python/util.py", line
439, in apply_fs_data
    return object(**args)

  File "/usr/share/koji-web/scripts/index.py", line 144, in login
    if not _sslLogin(req, session, username):

  File "/usr/share/koji-web/scripts/index.py", line 56, in _sslLogin
    proxyuser=username)

  File "__init__.py", line 1232, in ssl_login

  File "XMLRPCServerProxy.py", line 74, in __init__

  File "SSLCommon.py", line 38, in CreateSSLContext

StandardError: /root/genca/certs/kojiweb.pem does not exist or is not readable

My kojiweb.conf：

    PythonDebug On
    PythonOption KojiHubURL http://koji.ossii.com.tw/kojihub
    PythonOption KojiWebURL http://koji.ossii.com.tw/koji
    PythonOption KojiPackagesURL http://koji.ossii.com.tw/koji/packages
    #PythonOption WebPrincipal koji/kevin.lin(a)ossii.com.tw
    #PythonOption WebKeytab /etc/httpd.keytab
    #PythonOption WebCCache /var/tmp/kojiweb.ccache
    PythonOption WebCert /root/genca/certs/kojiweb.pem
    PythonOption ClientCA /root/genca/koji_ca_cert.crt
    PythonOption KojiHubCA /root/genca/koji_ca_cert.crt

My web user is "admin", and have a record in postgresql, also can user koji
instruction as normal.

and I create the web cert step is：

openssl pkcs12 -export -inkey certs/admin.key -in certs/admin.crt
-CAfile koji_ca_cert.crt \
-out certs/admin_browser_cert.p12


thanks..


-- 
=============================================================================
林毓能
Linul
RedHat Certified Engineer

TsLG網路工作室：http://www.tslg.idv.tw
TsLG城市午後：http://blog.tslg.idv.tw
Linul攝影紀實：http://photo.tslg.idv.tw
手機：[phone]
E-mail : kevin.linul(a)gmail.com; linul(a)tslg.idv.tw
=============================================================================