On Wed, 2008-11-19 at 11:31 -0500, John A. Sullivan III wrote: > On Fri, 2008-11-14 at 08:04 -0500, John A. Sullivan III wrote: > > Hello, all. I've hit a problem right away while trying to use OpenCA > > 1.0.2 running on CentOS 5.2 with PostgreSQL 8.1.11. I installed > > separate online and offline systems, i.e., CA/node and then RA/node/Pub. > > When retrieving the list of new CSRs under RA Operations, I receive the > > following error: > > > > Database failed with errorcode 20032. SELECT_FAILED (error 20016: > > EXECUTE_FAILED (error 11111: Do not commit if the database or the module > > itself fails.)) > > > > The entry in var/openca/log/stderr.log makes it look like a bug. Here > > is the error: > > > > DBD::Pg::st execute failed: ERROR: column "request.req_key" must appear > > in the GROUP BY clause or be used in an aggregate function > > DBD::Pg::st execute failed: ERROR: current transaction is aborted, > > commands ignored until end of transaction block > > > > The installation, initialization, and configuration import went fine. I > > then used the pub interface to create a browser request using server > > side key generation. After submitting the request, I went to the RA, > > successfully logged in using LDAP password authentication, chose RA > > Operations, Certificate Requests, New. I left all fields set to All and > > clicked Search. I then receive the above errors. I also tried > > searching with all fields explicitly set and received the same results. > > > > If I manually connect to the database as the openca user and query the > > request table, I can see the request in the database. > > > > I should mention this also happens whenever I select from the RA > > interface Information / CRLS / and either Valid or Expired. Here is the > > entry from the postgresql log: > > > > ERROR: column "crl.last_update" must appear in the GROUP BY clause or > > be used in an aggregate function > > ERROR: current transaction is aborted, commands ignored until end of > > transaction block > > > > Hmm . . . furthermore, if I search for the CSR (Information / Search / > > Requests), I am able to retrieve the request. > > > > Argh!!! I get the same thing on the CA with the following actions: > > > > CA Operations / Certificate Requests / all options > > CA Operations / Renewal Requests / New > > Information / Certificate Requests / all options > > Information / CRLS / all options > > > > Am I doing something wrong? Is there a fix? This has us stopped in our > > tracks for now. Thanks - John > > Sorry to bump this but it has us stymied in our attempt to move 1.0.2 > into production. Alas, I am really not a developer and especially do > not know perl to troubleshoot this myself. > > It smells like a problem we hit on the ISCS open source network security > management project (http://iscs.sourceforge.net) where we had developed > on mysql, ported to postgresql and found almost this exact error. > Postgresql was much more exact about the groupby syntax. I don't recall > exactly what it was - if it needed the primary key or if it needed the > groupby columns to also appear in the select list. I think it was the > latter. > > Please let me know if there is anything I can do to assist in finding > and resolving the problem. Thanks - John Sorry to be a pain - one last bump. Otherwise, I'll try to dig into the code myself even though I don't know perl and could not find the query on my first code scan. If I can't find it and fix it, we'll have to do something else for our PKI. Any pointers on where to look for the query? Thanks - John -- John A. Sullivan III Open Source Development Corporation +1 207-985-7880 [EMAIL PROTECTED]
http://www.spiritualoutreach.com Making Christianity intelligible to secular society ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ OpenCA-Devel mailing list OpenCA-Devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openca-devel
