hi, I've meet that problem. Now resolved it.

The reason is ServerHowTo create a cert file for admin-account .but the postgresql just have the admin account!

please vim the following file . it create "admin " not "admin-account" admin account in the postgresql!
---------------
k...@localhost$ psql koji koji < /usr/share/doc/koji*/docs/schema.sql
========================

but above we do follow the ServerHowTo is :
----------
for user in kojira kojiweb kojihub kojibuilder{1..5} admin-account; do
openssl genrsa -out certs/${user}.key 2048
openssl req -config ssl.cnf -new -nodes -out certs/${user}.csr -key certs/${user}.key openssl ca -config ssl.cnf -keyfile private/${caname}_ca_cert.key -cert ${caname}_ca_cert.crt \
-out certs/${user}.crt -outdir certs -infiles certs/${user}.csr
cat certs/${user}.crt certs/${user}.key > ${user}.pem
done
====================
that create a ${user}.pem for "admin-account" !

Now,you know how to do it .


On Fri, 15 May 2009 01:42:48 +0800, Lester Pimentel <[email protected]> wrote:


Hi all -

I'm fighting with getting koji configured and running on a single
machine to test it out on. Stepping through this wiki:

http://fedoraproject.org/wiki/Koji/ServerHowTo

Configuring it for ssl auth, I've gotten down to installing kojihub
and when I try to do something like adding a user through koji, I get:

[kojiad...@testmachine ~]$ koji add-user kojira
ActionNotAllowed: admin permission required

Here's what my users look like in the koji db:

id | name | password | status | usertype | krb_principal
----+-------------------------
---+----------+--------+----------+---------------
 10 | koji                       |          |      0 |        0 |
 12 | kojiadmin                  |          |      0 |        1 |

Any ideas on what I could be missing? Is this an ssl authentication error or database related?

Thanks,
Lester



--
Fedora-buildsys-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-buildsys-list



--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

--
Fedora-buildsys-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-buildsys-list

Reply via email to