Hi List- I'm very happy to report that I am farther along in Kevin Mitcham's cookbook than I've ever been before. My real goal is to get a two-interface setup going on an OpenBSD 3.5 box, but I was running into so many problems (with chroot and accessing syslog device et. al.) that I decided to try with a Linux box first (RC6). This is a newly built Gentoo system, and I've worked my way through all of Kevin Mitcham's cookbook with successful results at each step except for when I get to here:
================== ...initialize the RA database http://myhost.wherever.edu/ra-node Admin->Server Init, initialize DB Admin->Server Init, Import Configuration ================== When I was modifying config.xml in the open[rc]a/OpenCA/etc directories I wasn't quite sure how to handle this part of the instructions from Kevin's cookbook: ================== <!-- these are the devices for the default dataexchange --> (these might not be in config.xml; if not, see below) <name>dataexchange_device_up</name> <value>/usr/local/openca/openca/var/tmp/ca-up</value> </option> <option> <name>dataexchange_device_down</name> <value>/usr/local/openca/openca/var/tmp/ca-down</value> </option> <option> <name>dataexchange_device_local</name> <value>/usr/local/openra/openca/var/tmp/ra-local</value> if the dataexchange device section is not in config.xml, go to /usr/local/openca/openca/servers and look at ca-node.conf.template and ca.conf.template (/usr/local/openca/openca/etc/servers/ca.conf.template) line EXPORT_IMPORT_DOWN_DEVICE "/dev/fd0" to EXPORT_IMPORT_DOWN_DEVICE "/usr/local/openca/openca/var/tmp/ca-down" line EXPORT_IMPORT_LOCAL_DEVICE "/dev/fd0" to EXPORT_IMPORT_LOCAL_DEVICE "/usr/local/openra/openca/var/tmp/ra-local" ra-node.conf.template needs similar updates, as well ra IMPORT UP DEVICE should be the exact same file as the CA IMPORT_DOWN_DEVICE ================== In particular, Kevin goes into detail with modifying only the openca/OpenCA/etc/config.xml file; not so for openra/OpenCA/etc/config.xml. I assumed that this last note that he writes, "ra IMPORT UP DEVICE should be the exact same file as the CA IMPORT_DOWN_DEVICE" should apply equally to the config.xml files (although he is writing in particular about the template files when he says this). Could someone tell me how these lines should look in my open[rc]a/OpenCA/etc/config.xml files? Or perhaps even better, share with me a complete copy of working config.xml files for a two-interface system (ideally based on Kevin's cookbook, but if not that's ok too)? <name>dataexchange_device_up</name> <value>/usr/local/openca/openca/var/tmp/ca-up</value> </option> <option> <name>dataexchange_device_down</name> <value>/usr/local/openca/openca/var/tmp/ca-down</value> </option> <option> <name>dataexchange_device_local</name> <value>/usr/local/openra/openca/var/tmp/ra-local</value> The problem that I have encountered at the Import Configuration step of initializing the RA database seems very likely to be related to my improper settings for these lines because the error message in the browser window is: ======================= Importing the configuration from a higher level of the hierarchy ... (Please wait until operation completes) ________________________________________________________________________ Test the archive ... /bin/tar -tvf /usr/local/openra/OpenCA/var/tmp/ca-down FAILED Testing archive failed! 512 ======================= My initial configuration for these up and down devices was this: ares etc # cat /usr/local/openca/OpenCA/etc/config.xml|grep -C 2 dataexchange_device <!-- these are the devices for the default dataexchange --> <option> <name>dataexchange_device_up</name> <value>/usr/local/openca/OpenCA/var/tmp/ca-up</value> </option> <option> <name>dataexchange_device_down</name> <value>/usr/local/openca/OpenCA/var/tmp/ca-down</value> </option> <option> <name>dataexchange_device_local</name> <value>/usr/local/openra/OpenCA/var/tmp/ra-local</value> </option> ares etc # cat /usr/local/openra/OpenCA/etc/config.xml|grep -C 2 dataexchange_device <!-- these are the devices for the default dataexchange --> <option> <name>dataexchange_device_up</name> <value>/usr/local/openra/OpenCA/var/tmp/ca-up</value> </option> <option> <name>dataexchange_device_down</name> <value>/usr/local/openra/OpenCA/var/tmp/ca-down</value> </option> <option> <name>dataexchange_device_local</name> <value>/usr/local/openra/OpenCA/var/tmp/ra-local</value> </option> Then based on Kevin's comment, I changed it to this (and naturally reran the magic configure_etc.sh scripts and ran the openca_stop/start scripts): ares etc # cat /usr/local/openra/OpenCA/etc/config.xml|grep -C 2 dataexchange_device <!-- these are the devices for the default dataexchange --> <option> <name>dataexchange_device_up</name> <value>/usr/local/openra/OpenCA/var/tmp/ca-down</value> </option> <option> <name>dataexchange_device_down</name> <value>/usr/local/openra/OpenCA/var/tmp/ca-up</value> </option> <option> <name>dataexchange_device_local</name> <value>/usr/local/openra/OpenCA/var/tmp/ra-local</value> </option> ares etc # cat /usr/local/openca/OpenCA/etc/config.xml|grep -C 2 dataexchange_device <!-- these are the devices for the default dataexchange --> <option> <name>dataexchange_device_up</name> <value>/usr/local/openca/OpenCA/var/tmp/ca-up</value> </option> <option> <name>dataexchange_device_down</name> <value>/usr/local/openra/OpenCA/var/tmp/ca-down</value> </option> <option> <name>dataexchange_device_local</name> <value>/usr/local/openra/OpenCA/var/tmp/ra-local</value> </option> I suppose that some of the initialization steps may have depended upon those values being set correctly. What are the implications if they were not set correctly during those first init steps? Must I redo everything? It looks from the error message in the browser that there should already be a /usr/local/openra/OpenCA/var/tmp/ca-down file (or perhaps one in /usr/local/openca/OpenCA/var/tmp), but I find no ca-* or ra-* files in either /usr/local/open[rc]a/OpenCA/var/tmp. At what step is this archive created during the initialization? The OpenCA guide doesn't go into very much detail on these issues. Can anyone offer a bit of configuration help? Many thanks. -Kevin ------------------------------------------------------- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
