Hi Julien,

the CREATE/GRANT is an sql statement and not part of the config, it is a comment in the original repo and you have to run this on your SQL database or just remove the "driver" some lines above and leave the remainder unchanged.

Oliver

On 02.06.25 17:45, Julien Decormon wrote:

Hello,

Im on RHEL 8.10 trying to load the docker containers for OpenXPKI 3.32, I’m using https://github.com/openxpki/openxpki-docker/blob/master/docker-compose.yml

But I keep having an error on the /OpenXPKI_Client/ container :

*/docker compose up -d web/*

[+] Running 3/3

✔Container OpenXPKI_Database Healthy                     0.5s

✔Container OpenXPKI_Server Healthy                                           1.0s

✘Container OpenXPKI_Client Error                                                                 2.3s

dependency failed to start: container OpenXPKI_Client exited (25)

*/Docker log :/*

{"log":"Error loading config file /etc/openxpki/client.d/service/webui/default.yaml:\n","stream":"stderr","time":"2025-06-02T15:17:18.15176205Z"}

{"log":"\n","stream":"stderr","time":"2025-06-02T15:17:18.151810065Z"}

{"log":"Line : 52\n","stream":"stderr","time":"2025-06-02T15:17:18.151814256Z"}

{"log":"Column : 77\n","stream":"stderr","time":"2025-06-02T15:17:18.151816662Z"}

{"log":"Expected : COLON WS\n","stream":"stderr","time":"2025-06-02T15:17:18.151819002Z"}

{"log":"Got : EOL\n","stream":"stderr","time":"2025-06-02T15:17:18.151821629Z"}

{"log":"Where : /usr/share/perl5/YAML/PP/Parser.pm line 392\n","stream":"stderr","time":"2025-06-02T15:17:18.151824287Z"}

{"log":"YAML : \"        GRANT SELECT, INSERT, UPDATE, DELETE ON openxpki.frontend_session TO 'openxpki_session'\\@'localhost';\\n\"\n","stream":"stderr","time":"2025-06-02T15:17:18.151826784Z"}

{"log":" at /usr/share/perl5/YAML/PP/Loader.pm line 96.\n","stream":"stderr","time":"2025-06-02T15:17:18.151829517Z"}

*My****//etc/openxpki/client.d/service/webui/default.yaml/**file is the default config :***

# Properties of the session storage to manage the frontend session

session:

    # dsn driver specification, see CGI::Session, default is undef = file based

    # Recommended driver is now driver:openxpki which is a CGI::Session compatible

    # driver based on DBI with some extra features. See driver section below or

    # perldoc CGI::Session::Driver::openxpki for configuration details

    # Note - the driver is not part of the core package and must be installed

    # on its own. For debian there is a package: openxpki-cgi-session-driver

driver: driver:openxpki

    # parameters to be passed to the driver

params:

# only for file based driver, path to store the session files

# Directory: /tmp

# below are the settings for openxpki driver

# DSN and credentals to connect to the database

DataSource: dbi:MariaDB:dbname=openxpki;host=localhost

# it is strongly recommended to create a seperate user for this

# otherwise an attacker on the webservice can access your backend tables!

CREATE USER 'openxpki_session'@'localhost' IDENTIFIED BY 'mysecret';

GRANT SELECT, INSERT, UPDATE, DELETE ON openxpki.frontend_session TO 'openxpki_session'@'localhost';

User: openxpki_session

Password: mysecret

Any idea ?

Thank you,

Julien

________________________________________________________________

Ce message, ainsi que les pièces jointes, sont établis, sous la
seule responsabilité de l'expéditeur, à l'intention exclusive
de ses destinataires ; ils peuvent contenir des informations
confidentielles. Toute publication, utilisation ou diffusion
doit être autorisée préalablement.
Ce message a fait l'objet d'un traitement anti-virus.
Il est rappelé que tout message électronique est susceptible
d'altération au cours de son acheminement sur Internet.
________________________________________________________________

Vous pouvez consulter le site de l'Assemblée nationale à
l'adresse suivante : https://www.assemblee-nationale.fr



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

--
Protect your environment -  close windows and adopt a penguin!
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to