Mario, did you setup mysql ? My install notes include : This is needed on Online and Offline. You will need to determine a 'root' mysql passwd (in our case its the std master passwd we use for MYSQL here at VPAC) and a user name and passwd that OpenCA can use to talk to mysql, got to match those in the config.xml. Needless to say, we don't use the ones below so make some changes before issuing these commands.
mysql_install_db You might need to add --skip-bdb into mysqld_safe line in /etc/init.d/mysqld because of a centos bug (sometimes). see http://bugs.centos.org/view.php?id=869 service mysqld start /usr/bin/mysqladmin -u root password 'SOME_PASSWD' /usr/bin/mysqladmin -u root -h ca.apac.edu.au password 'SOME_PASSWD' connect to mysql as root and create an open ca account who can make a database. mysql -p GRANT create,drop,select,delete,insert,update ON openca_db.* TO 'openca_u'@'localhost' IDENTIFIED by 'USER_PW'; create database openca_db; exit; service mysqld start David On Mon, 2006-01-30 at 10:45 +0100, Mario Caspari wrote: > Hello Georg, > > The documentation says it supports either postgreSQL and mySQL...and in > another testing environment which all things (ca + ra) on one machine it's > already working. OK, I'll append the stderr.log to this posting.Is there > something to do elsewhere the config.xml to set up the DBI mode for mysql? > The dbi.conf.template is generated automatically. Perhaps there is to define > the charset for the DBMS elsewhere? My install paramters where > with-hiewrarchy-level=ca for the Ca and =ra for the online part, so I've got > the right hierarchy setup. > > PKI Master Alert: Logging error > PKI Master Alert: Aborting all operations > PKI Master Alert: Error: 64510030 > PKI Master Alert: Message: Das Hinzufügen einer Nachricht schlug für das > Protokollierungssystem sys_syslog fehl (6511070). Es konnte nicht auf das > Syslog-Gerät geschrieben werden. > PKI Master Alert: debugging messages of logging follow > OpenCA: Allgemeiner Fehler 6296060: Erlaubnis verweigert at > /usr/OpenCA/modules/perl5/OpenCA/UI/HTML.pm line 179. > Compilation failed in require at ./openca_start line 62. > 2006/01/27-13:30:48 Server closing! > DEBUG: OpenCA::DBI->new: checking for backend > DEBUG: OpenCA::DBI->new: defining the class parameters > DEBUG: OpenCA::DBI->new: rewrite table spaces if necessary (namespace) > DEBUG: OpenCA::DBI->new: checking the configuration for enough data > DEBUG: OpenCA::DBI->new: preparing the database (vendor dependent) > DEBUG: OpenCA::DBI->new: mysql detected > DEBUG: OpenCA::DBI->new: DB: > dbi:mysql:database=openca;host=localhost;port=3306;mysql_ssl=0 > DEBUG: OpenCA::DBI->new: OpenCA::DBI should now complete > DEBUG: OpenCA::DBI->Entering set_error ... > DEBUG: OpenCA::DBI->errno: gettext is defined > DEBUG: OpenCA::DBI->errno: old errno 11111 is present > DEBUG: OpenCA::DBI->errno: new errorcode is 11111 > Process Backgrounded > 2006/01/27-13:31:08 OpenCA::Server (type Net::Server::Fork) starting! > pid(3465) > Binding to UNIX socket file /var/lib/openca/tmp/openca_socket using > SOCK_STREAM > Setting gid to "33 33" > Setting uid to "33" > DEBUG: OpenCA::DBI->DESTROY: automatic commit by destructor DESTROY > DEBUG: OpenCA::DBI->commit: entering function > DEBUG: OpenCA::DBI->errno: returning local errorcode 0 > DEBUG: OpenCA::DBI->Entering set_error ... > DEBUG: OpenCA::DBI->errno: gettext is defined > 2006/01/30-07:25:38 Server closing! > DEBUG: OpenCA::DBI->DESTROY: automatic commit by destructor DESTROY > DEBUG: OpenCA::DBI->commit: entering function > DEBUG: OpenCA::DBI->errno: returning local errorcode 0 > DEBUG: OpenCA::DBI->Entering set_error ... > DEBUG: OpenCA::DBI->errno: gettext is defined > DEBUG: OpenCA::DBI->new: checking for backend > DEBUG: OpenCA::DBI->new: defining the class parameters > DEBUG: OpenCA::DBI->new: rewrite table spaces if necessary (namespace) > DEBUG: OpenCA::DBI->new: checking the configuration for enough data > DEBUG: OpenCA::DBI->new: preparing the database (vendor dependent) > DEBUG: OpenCA::DBI->new: mysql detected > DEBUG: OpenCA::DBI->new: DB: > dbi:mysql:database=openca;host=localhost;port=3306;mysql_ssl=0 > DEBUG: OpenCA::DBI->new: OpenCA::DBI should now complete > DEBUG: OpenCA::DBI->Entering set_error ... > DEBUG: OpenCA::DBI->errno: gettext is defined > DEBUG: OpenCA::DBI->errno: old errno 11111 is present > DEBUG: OpenCA::DBI->errno: new errorcode is 11111 > Process Backgrounded > 2006/01/30-07:26:00 OpenCA::Server (type Net::Server::Fork) starting! > pid(4750) > Binding to UNIX socket file /var/lib/openca/tmp/openca_socket using > SOCK_STREAM > Setting gid to "33 33" > Setting uid to "33" > DEBUG: OpenCA::DBI->DESTROY: automatic commit by destructor DESTROY > > Somebody knows what's running wrong here? > > Greetings Mario > > > -----Ursprüngliche Nachricht----- > > Von: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Im Auftrag > > von Georg Lippold > > Gesendet: Samstag, 28. Januar 2006 13:35 > > An: [email protected] > > Betreff: Re: AW: AW: [Openca-Users] No certificates are present > > > > Hello Mario, > > > > I also experienced some problems with mysql, but I don't remember > > exactly which. Finally, I settled for postgresql and everything runs > > smooth now. IIRC the documentation doesn't recommend mysql but rather > > postgresql or some other "real" database. > > > > Greetings, > > > > Georg > > > > Mario Caspari wrote: > > > Hello Georg, > > > > > > Thanx for your answer. > > > I already did this, and I only found the directory > > structure, but it was empty...no files in it...so I went to > > copy the cacerts by hand, like Til advised. Than I went to > > create a normal users certifcate over the pub interface, > > signed it by the RA-Admin's certificate and tried to import > > it to the higher level, the CA, to sign it. But here also the > > structure was created, but without contents. So, importing it > > to the CA failed, of course. Perhaps there is a problem with > > the mysql database, but the ra and the ca interfaces are able > > to write into it. But the dataexchange scripts are possibly > > not able to start a select query during the export process from mysql? > > > > > > Regards Mario > > > > > > > > > > > >>-----Ursprüngliche Nachricht----- > > >>Von: [EMAIL PROTECTED] > > >>[mailto:[EMAIL PROTECTED] Im Auftrag > > >>von Georg Lippold > > >>Gesendet: Freitag, 27. Januar 2006 12:14 > > >>An: [email protected] > > >>Betreff: Re: AW: [Openca-Users] No certificates are present > > >> > > >>Hi Mario, > > >> > > >>the file on the disk is a tar file. You should be able to extract it > > >>somewhere and examine its contents. If you can't find any > > certificates > > >>in it, it is probably a bug. > > >> > > >>Greetings, > > >> > > >>Georg > > >> > > >>Mario Caspari wrote: > > >> > > >>>Hello, > > >>> > > >>>Thanks for your hints ;-), but if that behaviour is a bug, > > >> > > >>I'm wondering that there is no message about it? > > >> > > >>>Regards, Mario > > >>> > > >>> > > >>> > > >>> > > >>> > > >>>>-----Ursprüngliche Nachricht----- > > >>>>Von: [EMAIL PROTECTED] > > >>>>[mailto:[EMAIL PROTECTED] Im Auftrag > > >>>>von Obes, Til > > >>>>Gesendet: Freitag, 27. Januar 2006 08:06 > > >>>>An: [email protected] > > >>>>Betreff: RE: [Openca-Users] No certificates are present > > >>>> > > >>>> > > >>>> > > >>>> > > >>>>>hmmm.nobody is answering to my question. > > >>>>> > > >>>>>Nobody knows or it has been answered already one million times? > > >>>>>Anyway, I can't find the answers, so I'm also happy with a hint > > >>>>>where to look. > > >>>> > > >>>>3 hints: > > >>>>- dont write hmtl emails > > >>>>- make wraps after 80 chars > > >>>>- that could be a bug, because if i remember right, i had > > >>>> to copy them by hand > > >>>> > > >>>>Regards > > >>>>Til > > >>>> > > >>> > > >>> > > >>> > > >>>------------------------------------------------------- > > >>>This SF.net email is sponsored by: Splunk Inc. Do you grep > > >> > > >>through log files > > >> > > >>>for problems? Stop! Download the new AJAX search engine > > that makes > > >>>searching your log files as easy as surfing the web. > > >> > > >>DOWNLOAD SPLUNK! > > >> > > >>>http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642 > > >>>_______________________________________________ > > >>>Openca-Users mailing list > > >>>[email protected] > > >>>https://lists.sourceforge.net/lists/listinfo/openca-users > > >>> > > >>> > > >> > > >> > > >>------------------------------------------------------- > > >>This SF.net email is sponsored by: Splunk Inc. Do you grep > > >>through log files > > >>for problems? Stop! Download the new AJAX search engine that makes > > >>searching your log files as easy as surfing the web. > > >>DOWNLOAD SPLUNK! > > >>http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642 > > >>_______________________________________________ > > >>Openca-Users mailing list > > >>[email protected] > > >>https://lists.sourceforge.net/lists/listinfo/openca-users > > >> > > > > > > > > > > > > ------------------------------------------------------- > > > This SF.net email is sponsored by: Splunk Inc. Do you grep > > through log files > > > for problems? Stop! Download the new AJAX search engine that makes > > > searching your log files as easy as surfing the web. > > DOWNLOAD SPLUNK! > > > http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642 > > > _______________________________________________ > > > Openca-Users mailing list > > > [email protected] > > > https://lists.sourceforge.net/lists/listinfo/openca-users > > > > > > > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep > > through log files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. > > DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642 > > _______________________________________________ > > Openca-Users mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/openca-users > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642 > _______________________________________________ > Openca-Users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openca-users ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642 _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
