Bug#841477: [Pkg-fedora-ds-maintainers] Bug#841477: 389-ds-base: 389 directory server fails to start TLS/SSL

2016-10-26 Thread Timo Aaltonen
reassign 841477 svrcore 1:4.1.2+dfsg1-2 thanks On 26.10.2016 22:08, Michal Kašpar wrote: > OK. It's definitely the libsvrcore0 library. I just recompiled it > myself with debug enabled (configure --enable-debug --with-systemd), > copied it over /usr/lib/x86_64-linux-gnu/libsvrcore.so.0.0.0 and

Bug#841477: [Pkg-fedora-ds-maintainers] Bug#841477: 389-ds-base: 389 directory server fails to start TLS/SSL

2016-10-26 Thread Timo Aaltonen
On 26.10.2016 21:29, Michal Kašpar wrote: > I was trying to debug the problem myself and it seems the SSL > initialization fails in svrcore_setup function in > ldap/servers/slapd/ssl.c. The code there tries to call > SVRCORE_CreateStdSystemdPinObj or SVRCORE_CreateStdPinObj functions > from

Bug#841477: 389-ds-base: 389 directory server fails to start TLS/SSL

2016-10-26 Thread Michal Kašpar
OK. It's definitely the libsvrcore0 library. I just recompiled it myself with debug enabled (configure --enable-debug --with-systemd), copied it over /usr/lib/x86_64-linux-gnu/libsvrcore.so.0.0.0 and the directory server initialized the SSL fine and runs on port 636. The result is the FreeIPA

Bug#841477: 389-ds-base: 389 directory server fails to start TLS/SSL

2016-10-26 Thread Michal Kašpar
I was trying to debug the problem myself and it seems the SSL initialization fails in svrcore_setup function in ldap/servers/slapd/ssl.c. The code there tries to call SVRCORE_CreateStdSystemdPinObj or SVRCORE_CreateStdPinObj functions from libsvrcore0 library based on --with-systemd configure

Bug#841477: [Pkg-fedora-ds-maintainers] Bug#841477: 389-ds-base: 389 directory server fails to start TLS/SSL

2016-10-21 Thread Michal Kašpar
Thanks for the reply. I've found some other things about the problem. The linking of the NSS library causes secmod.db to be changed. I've tried to list its properties via modutil (modutil -list -dbdir /etc/dirsrv/slapd-instance) and got: Listing of PKCS #11 Modules

Bug#841477: [Pkg-fedora-ds-maintainers] Bug#841477: 389-ds-base: 389 directory server fails to start TLS/SSL

2016-10-21 Thread Timo Aaltonen
On 21.10.2016 02:57, Michal Kaspar wrote: > Package: 389-ds-base > Version: 1.3.5.13-1 > Severity: important > > Dear Maintainer, > After recent updates the 389 directory server fails to start SSL on port > 636. The rest of server starts fine but in the logs, there is an error > message: > SSL

Bug#841477: 389-ds-base: 389 directory server fails to start TLS/SSL

2016-10-20 Thread Michal Kaspar
Package: 389-ds-base Version: 1.3.5.13-1 Severity: important Dear Maintainer, After recent updates the 389 directory server fails to start SSL on port 636. The rest of server starts fine but in the logs, there is an error message: SSL alert: Security Initialization: Unable to create PinObj