[Fedora-directory-users] slapi search internal errors popping up in error log

[Richard Megginson]

Richard Hesse wrote:
> Nothing really informative in the admin server logs. Just the 500's being recorded:
>
> 10.69.66.9 - cn=directory manager [08/Oct/2007:17:51:56 +0000] "POST /admin-serv/tasks/configuration/SecurityOp HTTP/1.0" 500 620
>   
ps -ef|grep httpd
ls -al /opt/fedora-ds/admin-serv/logs /opt/fedora-ds/admin-serv/config
# do the following only after obscuring any sensitive data
cat /opt/fedora-ds/shared/config/dbswitch.conf
cat /opt/fedora-ds/admin-serv/config/adm.conf
> -richard
>
> -----Original Message-----
> From: fedora-directory-users-bounces at redhat.com [mailto:fedora-directory-users-bounces at redhat.com] On Behalf Of Richard Megginson
> Sent: Monday, October 08, 2007 11:09 AM
> To: General discussion list for the Fedora Directory server project.
> Subject: Re: [Fedora-directory-users] slapi search internal errors popping up in error log
>
> Richard Hesse wrote:
>   
>> No, we're not using client certs but that doesn't preclude someone using their own certs.
>>
>> No certmap.conf in the instance directory and it looks like the shared one is stock:
>> cat certmap.conf | grep -v "#"
>> certmap default         default
>>
>> The error from the configuration tab is just a generic 500. No additional text in the dialog nor in the logs.
>>
>>     
> Check the admin server access and error log - /opt/fedora-ds/admin-serv/logs
>   
>> Alias directory:
>> drwxr-xr-x  2 nobody nobody   4096 Oct  8 17:42 .
>> drwxr-xr-x 15 root   root     4096 Oct  8 17:42 ..
>> -rwxr-xr-x  1 root   nobody 347368 Oct  6 00:22 libnssckbi.so
>> -rw-------  1 nobody nobody  16384 Oct  6 00:24 secmod.db
>> -rw-------  1 nobody nobody  65536 Oct  6 00:22 slapd-fds-cert8.db
>> -rw-------  1 nobody nobody  16384 Oct  6 00:22 slapd-fds-key3.db
>> -r--------  1 nobody nobody     41 Oct  6 00:22 slapd-fds-pin.txt
>>
>>
>> Thanks in advance.
>>
>> -richard
>>
>> -----Original Message-----
>> From: fedora-directory-users-bounces at redhat.com
>> [mailto:fedora-directory-users-bounces at redhat.com] On Behalf Of
>> Richard Megginson
>> Sent: Saturday, October 06, 2007 1:46 PM
>> To: General discussion list for the Fedora Directory server project.
>> Subject: Re: [Fedora-directory-users] slapi search internal errors
>> popping up in error log
>>
>> Richard Hesse wrote:
>>
>>     
>>> [06/Oct/2007:00:24:51 +0000] - slapi_search_internal
>>> ("CN=fds1.sv.powerset.com, OU=Domain Control Validated,
>>> O=fds1.sv.powerset.com", subtree, objectclass=*) err 32
>>>
>>>
>>>
>>> I'm guessing that this is cert related, but the TLS/SSL operations
>>> are working fine.
>>>
>>>
>>>       
>> Are you using client cert based authentication?
>>
>> cat /opt/fedora-ds/slapd-instance/config/certmap.conf
>> /opt/fedora-ds/shared/config/certmap.conf
>>
>>     
>>> However, I noticed that I can no longer view the encryption tab for
>>> this server in the console.
>>>
>>>
>>>       
>> What error do you get when you try to view the encryption tab?
>>
>> ls -al /opt/fedora-ds/alias
>>
>>     
>>> Any ideas what this error means or how to fix it?
>>>
>>>
>>>
>>> Thanks.
>>>
>>>
>>>
>>> -richard
>>>
>>> ---------------------------------------------------------------------
>>> -
>>> --
>>>
>>> --
>>> Fedora-directory-users mailing list
>>> Fedora-directory-users at redhat.com
>>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>>
>>>
>>>       
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>     
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20071008/5d9d29ce/attachment.bin>