Hello to all!
I configure RBAC continuing the steps:
1-initialize the AC 2-create the ca operator 3-create the ra operator 4-export the configuración of CA 5-import the configuration in RA
6-in apache configure SSLVerifyClient 7-active the mechanism RBAC in ra.conf and ra_node. conf
I have the following error in the file ra_error.log
[Tue Jun 8 10:20:00 2004] [error] access to /var/www/html/ra/index.html failed for 10.10.X.X, reason: SSL requirement expression not fulfilled (see SSL logfile for more details) Can't locate rbac-utils.lib in @INC (@INC contains: /usr/local/openca.0.9.1.1/modules/perl5/i386-linux /usr/local/openca.0.9.1.1/modules/perl5 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl .) at /usr/local/openca.0.9.1.1/openca/lib/servers/ra/functions/initRBAC line 4. Compilation failed in require at /var/www/cgi-bin/ra/RAServer line 203. [Tue Jun 8 10:20:22 2004] [error] [client 10.10.240.35] Premature end of script headers: /var/www/cgi-bin/ra/RAServer
in the file error_SSL. log do not have anything logged
Is able someone to help me? Thanks! PJ
*** HI,
I've found also this error. The problem is in forgotten path to rbac-utils in initRBAC. Use this patch to correct
================================================== diff -r -u openca-0.9.1.8/src/common/lib/functions/initRBAC openca-0.9.1.8.update/src/common/lib/functions/initRBAC --- openca-0.9.1.8/src/common/lib/functions/initRBAC Tue Aug 13 11:04:51 2002 +++ openca-0.9.1.8.update/src/common/lib/functions/initRBAC Thu May 13 11:34:02 2004 @@ -1,7 +1,7 @@ ## Uses the OpenCA::RBAC module
## load rbac-utils.lib -require "rbac-utils.lib"; +require "$common_libs/rbac-utils.lib";
1;
==================================================
Simply add $common_libs path to the rbac-utils.lib in initRBAC file.
Bye
Robert Wolf.
