I fixed the "edit CSR" acl with this also but where or what is 
the rebuild ca chain called during phase I?  Rebuild using node
management works ok.

thanks!
rt


-----Original Message-----
From:   [EMAIL PROTECTED] on behalf of Michael Bell
Sent:   Mon 9/6/2004 7:33 AM
To:     [EMAIL PROTECTED]
Cc:     
Subject:        Re: Solved: [OpenCA-Devel] db initialization - mysql
Piotr Wadas wrote:
> Hello,
> still using debian/sarge/i386 and latest snapshot :>
> I had error "permission denied" when logged on first time with root/root,
> using DB or DBI.
> I solved it as "workaround" - database is initialized successfully,
> when instead starting from https://host/ca I go to https://host/ca-node
> then Administration and then I "reinitialize" db from "backup copy and
> recovery" menu - mysql tables are created as expected.

This is a misconfiguration in the default ACL. The solution is quite 
simple - set an additional right in the ACL.

cd etc/rbac
vi acl.xml
   search for the operation "initialization of database"
   replace the module id of the node (usually "3") by "(0|3)"
etc/openca_rc restart

Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel



<<winmail.dat>>

Reply via email to