Hi,

Thanks to all...I finally installed OpenLdap without root privilages on 
solaris.
It just started openldap on port 9009.

I installed Open CA for RA server with 
all...htdocs-ra,htdocs-online,htdocs-ldap and htdocs-public.
I started apache after modifying httpd.conf.
In my apache conf file I used
two ports 8888 and 4443.

As given in raserver.conf.example of openca I added
<IfDefine SSL>
NameVirtualHost _default_:4443
NameVirtualHost _default_:8888
</IfDefine>
But while starting apache with startssl argument I got warning saying
no virtual hosts present. But It did start the apache with ssl support after 
i entered the secret phrase. My error log:
[warn] NameVirtualHost _default_:4443 has no VirtualHosts
[warn] NameVirtualHost _default_:8888 has no VirtualHosts


In the <IfDefine SSL>....</IfDefine> section of httpd.cof at the end I added 
two vertual hosts..

First one is <VirtualHost _default_:4443>

Here I gave DocumentRoot 
"/home/pkira/public_html/pavansura/apache_1.3.26/htdocs"
besides other options
Thus I am able to access htdocs-ra, htdocs-ldap, htdocs-online
with https:dot.cs.odu.edu:4443/ appended with corresponding extensions


Second one is <VirtualHost _default_:8888>

Here i gave DocumentRoot 
"/home/pkira/public_html/pavansura/apache_1.3.26/htdocs/htdocs-public"
beides other options and was thus able to access 
https://dot.cs.odu.edu:8888/htdocs-public/


Now When I went to RA site at https://dot.cs.odu.edu:4443/htdocs-online/
I could Initialize the database but while importing configuration by 
clicking the second link all works but for this error
====================================================================
Importing CA-Certificates into ldap ... Failed in Bind: 2
Cannot write CA-Certificate 75a5cb34d97a8ba44c4279fcb32eb8f4 to LDAP
====================================================================

Part of my slapd.conf file

suffix          "o=ODU PKI, c=US"
rootdn          "cn=Manager, o=ODU PKI, c=US"

and Indices to maintain are (I really donot know what the line below
does
index   objectClass     eq


When I checked my ldap.conf file under etc/srever of OpenCA I found that the 
basedn is set to "o=ODU, c=US". But if I am correct this should be same as 
suffix of slapd.conf of ldap (as seen above)
o=ODU PKI unlike 0=ODU here.

I geuss this is causing the problem.
I tried to change this in the the ldap.conf file but i guess this wrong 
value is set in many other places and thus error repeated..

Also when i looked at certsMail file under OpenCA/lib/servers/ra directory 
it read the following urls besided other information
=======================================================================
"follow the proposed link to import the certificate directly from the server 
https://dot.cs.odu.edu/cgi-bin/cgi-public/pki?cmd=getcert&key=@SERIAL@&type=CERTIFICATE
Please, import the CA certificate (or the PKI chain) from our server
to check the correctness of your certificate:
https://dot.cs.odu.edu/htdocs-public";
======================================================================

those links won't work as the htdocs-public is running on port 8888.
It shoud be some thing like https://dot.cs.odu.edu:8888/htdocs-public

I guess while configuring openca even before installing it I need to mention 
this port....?? any clues where I went wrong..


Finally in the https://dot.cs.odu.edu:4443/htdocs-ldap/ page in the 
Utilities part the Ldap Search link is not see...I just see a plain text 
without any link to it...?

Thanks a lot for all your help.


Pavan Sura.


_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to