[Fedora-directory-users] RedHat 4/Fedora-DS - SSL Cert DB not readable?

[Richard Megginson]

Glenn wrote:
> Travis - I had this problem with new installations and clean re-
> installations.  The installation of Fedora Directory did not create the 
> certificate database.  I solved it by creating the appropriately-named 
> certificate database in the correct location using certutil.   -Glenn. 
>   
Is there any sort of pattern to when it does or does not create the 
key/cert databases?  When the server starts up, it is supposed to create 
them if they are not there.  This means that /opt/fedora-ds/alias must 
be writable by the server user id (default nobody).

When you uninstall the server, it does not remove the key and cert 
databases, because this could be potentially devastating if you had not 
backed them up first.
> ---------- Original Message -----------
> From: Richard Megginson <rmeggins at redhat.com>
> To: tag at netfoo.org, "General discussion list for the Fedora Directory server 
> project." <fedora-directory-users at redhat.com>
> Sent: Tue, 02 Oct 2007 17:04:33 -0600
> Subject: Re: [Fedora-directory-users] RedHat 4/Fedora-DS - SSL Cert DB not 
> readable?
>
>   
>> Travis wrote:
>>     
>>> I agree with Graham's original idea - its almost as if the server is not
>>> looking in the proper location for the database.  Does anyone know where
>>> this is set?
>>>   
>>>       
>> It looks for /opt/fedora-ds/alias/slapd-instancename-cert8.db - also 
>> grep -i nscert /opt/fedora-ds/slapd-instancename/config/dse.ldif
>>     
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20071003/0e598c10/attachment.bin>