Red Hat DIRECTORY SERVER 8.0 Manual do Utilizador descarregar pdf (Página 16)

nCipher Modules: Integration Guide for Red Hat Certificate System 8.0 1.0 16

Chapter 3: Troubleshooting

The following tables provide troubleshooting guidelines.

Problem Bind error in Internal Database panel.

Cause Password might be incorrect, or an entry in /etc/pki-ca/CS.cfg file is not present.

Resolution Recheck the Directory Server password, and check if the following variable is present in

/etc/pki-ca/CS.cfg: preop.configModules.module1.commonName=nfast.

Problem Key generation failure in

Key Pairs panel.

Cause The variable CKNFAST_OVERRIDE_SECURITY_ASSURANCES=tokenkeys is not present in the

cknfastrc file, and user pkiuser is not a member of the nfast group.

Resolution 1 Check in the

cknfastrc file if the following variable is present:

CKNFAST_OVERRIDE_SECURITY_ASSURANCES=tokenkeys

2 Add

pkiuser in /etc/groups/ as follows:

nfast:x:106:pkiuser

Problem • When trying to open https://hostname:9443/ca/services, the following error message

appears:

Error message - ssl_error_bad_cert_alert

• When trying to open

https://hostname:9445/ca/admin/console/config/login?pin=xxxxxxxxxxxxxxxxxxxx, the

following error message appears:

Error Message - sec_error_reused_issuer_and_serial

Cause There are old certificates in the browser certificate store.

Resolution In the Firefox browser:

1 Navigate to

Tools > Options > Encryption > View certificate.

2 Delete the following old certificates from

Certificate stores:

- Your certificate.

-People.

-Server.

-Authorities.

-Others.

1 2 ... 11 12 13 14 15 16 17 18

Sem comentários

Red Hat DIRECTORY SERVER 8.0 Manual do Utilizador Página 16