Michael Bell schrieb: > I rebuild the RPMs and lost the complete morning by fixing the bugs in > the build-routines :(
Thanks a lot. I'll probably try the new ones out. In the mean time, I installed the whole stuff from the distribution tarball and connected it to postgres. The difficulties I had resulted in the following HOWTO. It's POD. Use pod2man or pod2html to convert. Maybe you can find a place for it in the documenation? Regards Alex ============= cut here =========================================== =head1 OpenCA with PostgreSQL HOWTO =head2 TOPIC This document describes how to connect OpenCA to PostgreSQL in a few simple steps =head2 Files The postgres files that probably need modification are in the postgres data directory, on SuSE Linux that is C</var/lib/pgsql/data>. The files are C<pg_hba.conf> and probably C<pg_ident.conf> The OpenCA config files are below the openca root, which on my system is C</usr/local/openca.0.9.0>. The files that must be modified are in the C<openca/etc/servers> subdirectory. =head2 Postgres initialisation Allow access to the C<openca> database by modifying C<pg_hba.conf>: insert the following line (unless there are already lines allowing password access from localhost to all databases) host openca 127.0.0.1 255.255.255.255 password Then open C<pgsql> which can be done with pgsql template1 postgres and execute the following commands, thus creating a user named "openca" with the password "opencapw" that owns the new database also named "openca": CREATE USER openca WITH PASSWORD 'opencapw' CREATEDB; \connect - openca CREATE DATABASE openca; You can check the correct function by connecting to the new database with pgaccess after restarting postgres. =head3 Option: using ident for authentication I prefer ident for localhost authentication to plaintext passwords in config files. As the webserver on my computer runs as user C<wwwrun>, I appended the following line to C<pg_ident.conf>: openca wwwrun openca And changed the entry in pg_hba.conf to read host openca 127.0.0.1 255.255.255.255 ident openca This can be checked by using pgaccess under the wwwrun userid. =head2 Configure OpenCA =over 4 =item * In the general section of ca.conf, modify the C<DBmodule> line: DBmodule "DBI" =item * Edit C<DBI.conf>. You B<must> set a password even if you use ident for authentication (and don't use '0' as a password). If the password does not contain a value that evaluates to true in perl, the whole thing fails without telling you why (which is the reason I wrote this howto :-) Example for C<DBI.conf>: DB_Type "Pg" DB_Name "openca" DB_Host "localhost" DB_Port 5432 DB_User "openca" DB_Passwd "opencapw" =back Now you can start the database initialisation in the CA web interface. =head2 AUTHOR Alex Rhomberg [EMAIL PROTECTED] ------------------------------------------------------- This sf.net email is sponsored by: See the NEW Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
