hi

any debian users here? hope so.

I'm trying to set up openca-SNAP-20040205 on woody but still no success.
I think redhat and suse users don't have such a problem because almost
every pre-required software (perl modules) is already installed in their
os. looks like mine is missing something...

here's what I've done:

debian woody 3.0r2 + all updates

apt-get install:
  unzip (5.50-1woody2) (for cpan)
  ncftp (3.1.3-1) (for cpan)
  wget (1.8.1-6.1) (for cpan)
  gettext (0.10.40-5)
  libexpat1 (1.95.2-6)
  libexpat1-dev (1.95.2-6)
  libgdbmg1-dev (1.7.3-27)
  libdb3-dev (3.2.9-16)
  libsasl-dev (1.5.27-3)
  slapd (2.0.23-6.3)
  libldap2-dev (2.0.23-6.3)

from sources (install procedure as desc. in aprop. INSTALL files):
  openssl-0.9.7c + ts-20031112-0_9_7c-patch (--prefix=/usr/local/ssl)
  apache-1.3.29 + mm-1.3.0 + mod_ssl-2.8.16-1.3.29 (--prefix=/usr/local/apache)

perl -MCPAN -e "shell" (they're not in openca/src/modules):
  XML::Parser (2.34)
  Text::Iconv (1.2)
  Scalar::Util (1.13)
  Text::Balanced (1.95)
  libnet (1.17)

and then (based on one of configs/*):

cd openca-SNAP-20040205
./configure --with-engine=no --with-httpd-user=nobody
--with-httpd-group=nogroup --with-openca-user=openca
--with-openca-group=openca --with-httpd-fs-prefix=/usr/local/apache
--with-cgi-url-prefix=/cgi-bin --with-web-host=jargot.nask.waw.pl
--with-ca-organization="NASK" --with-ca-country=PL
--with-ca-locality=Warszawa --with-openssl-prefix=/usr/local/ssl
--enable-db --disable-dbi --enable-rbac --disable-ocspd
--disable-openscep --with-db-name=openca --with-db-user=openca
--with-db-passwd="openca" --with-ldap-port=389
--with-ldap-root="cn=Manager,o=NASK,c=PL" --with-ldap-root-pwd="****"
--prefix=/usr/local
--with-service-mail-account="[EMAIL PROTECTED]"
--with-language=pl_PL --with-hierarchy-level=ca

script returns no errors/warnings

then 'make' which seems to work fine but returns some errors/warnings:

[...]
make[4]: Entering directory `[...]src/modules' [...]
Note (probably harmless): No library found for -lintl
Note (probably harmless): No library found for -liconv
Writing Makefile for Locale::gettext_xs
Writing Makefile for libintl-perl
[...]
make[4]: Entering directory `[...]src/modules' [...]
Checking for OPTIONAL modules
URI ..........................** FAILED **
Can't locate URI.pm in @INC
The URI::ldap module is needed ONLY IF you want to parse LDAP URLs
...
[and some more: Digest/MD5.pm IO/Socket/SSL.pm XML/SAX/Base.pm
MIME/Base64.pm Authen/SASL.pm]


and finally: make install-online (no errors/warnings).

after that:
vi config.xml (a bit too long to put it here ;)
./configure_etc.sh
./openca_start
chown nobody /usr/local/OpenCA/var/tmp/*

when I point my mozilla at the host I can see 'Index of /' with 4
elements: ldap, pub, node, ra.

when I enter pub all I see (after 2 seconds) is Server Information for
OpenCA Server Version 0.9.2 with list of installed modules (and version
numbers) including: OpenSSL Tools DB Configuration TRIStateCGI REQ X509
CRL PKCS7.

when I enter ldap, node or ra all I see is a empty page that keeps on
reloading. the url is
http://jargot/cgi-bin/ldap/ldap?redir=1

when I look at the source, then I see only 'skeleton' - <body> looks
like this:
<body onload="top.location.href='?redir=1'"></body>


now, I don't worry about "Can't locate URI.pm in @INC" and so on because
this modules are installed by openca instalator (a part from
XML/SAX/Base.pm - should I be worried by that?).

is it possible that
"Note (probably harmless): No library found for -lintl
Note (probably harmless): No library found for -liconv"
isn't so harmless?


/usr/local/OpenCA/var/session/cookie/* are empty a part from pub where
I see cgisess_***** files which look like this:

$D = {"_SESSION_EXPIRE_LIST" => {},"_SESSION_REMOTE_ADDR" =>
undef,"_SESSION_ATI ME" => "1076430519","valid" => 1,"_SESSION_CTIME" =>
"1076430519","_SESSION_ID" => "[numbers here]","_SESSION_ETIME" =>
1200,"name" => undef};


there are files in /usr/local/OpenCA/var/log/xml/time/2004/all/ that
contain something like this [cut a bit]:

<acl><mode>off</mode></acl>
<login><name></name><type>none</type></login>
<message></message>


... and I run out of ideas what to try next ...



by the way: should in my case folder /usr/local/OpenCA/var/db be owned
by nobody:nogroup ? (./configure [...] --with-db-name=openca
--with-db-user=openca [...])


if anybody 'survived' to the end of this mail and think to know the
solution, please give me a hint.


best regards



p.s. why woody and not other distro? in this case it must be woody.
besides, it's quite a popular distro and I can't see why openca
shouldn't compile and run on it.

-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
  F.Lewenda                               [ one 'logout' too far... ]
-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to