On Thu, 17 Nov 2011, John Dennis wrote: > >>My guess is this is due to the fact these jars changed their location. The > >>symlinks to the jars are established by pkicreate. We have a bug open to > >>enchance pkicreate (or add a new tool) which will adjust the links after an > >>upgrade (sorry don't recall the bz number off the top of my head, could did > >>it up if necessary). > >> > >>You can cd to /var/lib/pki-ca > >> > >>and do an ls -l on > >> > >>common/lib > >> > >>and > >> > >>webapps/ca/WEB-INF/lib/ > >> > >>and inspect the symbolic links to see if any are dangling. If so adjust the > >>link to point to it's new location. > > > >Success! > > > >Thanks so much. > > > >/var/lib/pki-ca/common/lib/jss4.jar > >/var/lib/pki-ca/webapps/ca/WEB-INF/lib/osutil.jar > >/var/lib/pki-ca/webapps/ca/WEB-INF/lib/symkey.jar > > > >Were all broken, pointing into /usr/lib/. Changing them to link to > >/usr/lib64 allowed pki to start properly and I can make changes to the > >host entry. > > > >It sounds like you have a fix for this in progress, or do I need to file a > >bug? > > Found the bugzilla, it's > > https://bugzilla.redhat.com/show_bug.cgi?id=728598 > > It's filed against Red Hat Certificate System in RHEL, not dogtag in > Fedora. Adam do you want to clone it into Fedora? I'll add symlinks update into freeipa F15->F16 upgrade script. At worst, if 728598 will be fixed in Fedora as well, that part of the code will do nothing.
Tickets 2103 and 2117 in upstream FreeIPA are for tracking that. -- / Alexander Bokovoy _______________________________________________ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
