Alexander Klink wrote:
> Hi Aaron,
> 
> On Wed, Jun 20, 2007 at 08:23:36AM -0600, Aaron Dalton wrote:
>>> to enable debugging and have a look at the log and debug files  
>>> (openxpki.log and stderr.log). In most cases you should be able to  
>>> find the problem yourself in the log files. If you are still having  
>>> problems please post the relevant parts of the log files to the list.
>>>
>> Thanks so much for your time.  Yes, I use 'ps -ax' to see if the server
>> is running and no I don't get a DONE message as suggested by the
>> documentation.  It just hangs up.  Yes I installed using the FreeBSD
>> ports.  (As a side note, the 'perl Makefile.PL' step reports that I am
>> missing the Template module.  CPAN does not list such a module.)
> It is part of Template Toolkit, "cpan Template" works just fine.
> 
>> I ran the debugging and got the following:
>> 2007/06/20 08:18:13 openxpki.system.FATAL [OpenXPKI::Server::Init (137)]
>> Exception during initialization task 'pki_realm':
>> I18N_OPENXPKI_SERVER_INIT_DEFAULT_CRYPTO_TOKEN_MISSING_PKI_REALM
>> 2007/06/20 08:18:13 openxpki.system.FATAL [OpenXPKI::Server
>> (/usr/local/lib/perl5/site_perl/5.8.8/mach/OpenXPKI/Server.pm:780)]
>> Exception during server initialization:
>> I18N_OPENXPKI_SERVER_INIT_DEFAULT_CRYPTO_TOKEN_MISSING_PKI_REALM
>>
>> In deployment it asked for a Realm Name and I did not use the default
>> "Realm 1".  Is that a problem?
> It should not be, but it might. From the error message I deduce that
> during the server initialization, your PKI realm could not be read from
> the configuration. Can you please post your config.xml so that we can
> have a look at it?
> 
> Best regards,
>     Alex

I don't see the name of the realm I created (Super Duper Games) in this
file.  I have Template-Tookit installed and the Makefile.PL still
complained.  The only Template.pm I see on my system is with the
Text-Template module.  Thanks again for your help.

-- 
Aaron Dalton       |   Super Duper Games
[EMAIL PROTECTED]   |   http://superdupergames.org
<openxpki>
  <common>
    <log_config>/usr/local/etc/openxpki/log.conf</log_config>
    <server>
        <user>openxpki</user>
        <group>openxpki</group>
        <socket_file>/usr/local/var/openxpki/openxpki.socket</socket_file>
        <pid_file>/usr/local/var/openxpki/openxpki.pid</pid_file>
        <session_dir>/usr/local/var/openxpki/session</session_dir>
        <connection_timeout>120</connection_timeout>
        <session_lifetime>1200</session_lifetime>
        <stderr>/usr/local/var/openxpki/stderr.log</stderr>
        <tmpdir>/usr/local/var/tmp</tmpdir>
        <transport>Simple</transport>
        <serialization>Simple</serialization>
        <serialization>JSON</serialization>
        <service>Default</service>
        <service>SCEP</service>
    </server>
    <i18n>
        <locale_directory>/usr/local/share/locale</locale_directory>
        <default_language>C</default_language>
    </i18n>
    <data_exchange>
        <export>
            <dir>/usr/local/var/openxpki/dataexchange/export</dir>
        </export>
        <import>
            <dir>/usr/local/var/openxpki/dataexchange/import</dir>
        </import>
    </data_exchange>

    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"; href="database.xml"/>
    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"; href="log_database.xml"/>
    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"; href="token.xml"/>
    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"; href="notification.xml"/>

  </common>


  <pki_realm name="">
    <common id="default">
      <!-- default token (used for general crypto operations not requiring
           private key operations) -->
      <token super="common/token_config/token{default}"/>

      <secret>
        <group id="default" label="I18N_OPENXPKI_CONFIG_DEFAULT_SECRET_AUTHENTICATION_GROUP">
          <method id="plain">
            <total_shares>1</total_shares>
          </method>
        <!-- alternatively use one of the following methods:
          <method id="literal">password</method>
          Literal password in the configuration file, not recommended
          except for testing.

          <method id="split">
            <total_shares>3</total_shares>
          </method>
          Shamir's secret splitting, three passphrase shares, three
          required to unlock the secret.

          <method id="split">
            <total_shares>5</total_shares>
            <required_shares>3</required_shares>
          </method>
          Shamir's secret splitting, five passphrase shares, any three
          required to unlock the secret.
        --> 
          <cache>
            <type>daemon</type>
            <usage_count>-1</usage_count>
          </cache>
        </group>
      </secret>
      <notification>
      </notification>

      <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"; href="profile.xml"/>
      <!-- LDAP addition  -->
      <!-- WARNING: keep "ldap_enable" set to "no" to avoid surprises  -->      
      <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"; href="ldappublic.xml"/>
      <!-- end of LDAP addition  -->
    </common>

    <!-- Issuing CAs defined for this realm -->
    <!-- 'id' is the internal CA identifier -->

    <!-- Subsystems defined for this realm -->
    <!-- 'id' is the subsystem identifier -->


    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"; href="auth.xml"/>
    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"; href="acl.xml"/>
    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"; href="workflow.xml"/>
  </pki_realm>


</openxpki>

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to