OK, I found the solution. 

Imagine, I was so ... last week and changed not Ca, but RA acl.xml. Sure, it
not worked for CA ;o)

ACL rule for "allow all" is worked in mails was sent. Sure, this is probably
not good to have such a rule, so finally I've created rule for sending mails
from CA-Node. Here it goes:

      <permission>
        <module>@node_module_id@</module>
        <role>.*</role>
        <operation>mail send</operation>
        <owner>.*</owner>
      </permission>

This is for acl.xml.template.

Have a nice day.


Dmitrij


 

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf 
> Of Dmitrij Mironov
> Sent: Monday, July 11, 2005 11:41 AM
> To: [email protected]
> Subject: [Openca-Users] Still can't send emails from RA-Node
> 
> Hello guys,
> 
> Please help, I don't know where to dig anymore. 
> I have freebsd 4.11 with openca 0.9.2.2 in one machine & one database
> (mysql) installation. 
> 
> I have issued some certificates on CA side, I can see them in 
> DB, I see prepared mails, but if i try to send mails from CA 
> node I get error:
> 
> Error 6296060
> General Error Permission denied.
> 
> In stderr.log I see this:
> 
> Process Backgrounded
> 2005/07/05-11:29:49 OpenCA::Server (type Net::Server::Fork) starting!
> pid(31311)
> Binding to UNIX socket file
> /some-path-to-openca/OpenCA/var/tmp/openca_socket using 
> SOCK_STREAM Setting gid to "80 80"
> Setting uid to "80"
> NOTICE: Effective UID changed, but Real UID is 0: Couldn't 
> become uid "80"
> OpenCA: General error trapped 6296060: Permission denied. at 
> /some-path-to-openca/modules/perl5/O
> penCA/UI/HTML.pm line 179.
> Compilation failed in require at ./openca_start line 62.
> 
> I have done all Stewart James have suggested and it doesn't 
> work anyhow.
> 
> Any ideas guys?
> 
> Thanks,
> Dmitrij
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by the 'Do More With Dual!' 
> webinar happening
> July 14 at 8am PDT/11am EDT. We invite you to explore the 
> latest in dual
> core and dual graphics technology at this free one hour event 
> hosted by HP, 
> AMD, and NVIDIA.  To register visit http://www.hp.com/go/dualwebinar
> _______________________________________________
> Openca-Users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openca-users
> 



-------------------------------------------------------
This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening
July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual
core and dual graphics technology at this free one hour event hosted by HP, 
AMD, and NVIDIA.  To register visit http://www.hp.com/go/dualwebinar
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to