Security Pack Problem
We have a 4.2 Tarantella System on a Fedora Core4. Tarantella works in standard mode fine. Now i install the Security Pack. I generate a X509 Certificate with the following command:
openssl genrsa -des3 -out pass.key 1024
openssl rsa -in pass.key -out server.key
openssl req -new -key server.key -x509 -out server.crt -days 999
then i Import it with de following command:
./tarantella security certuse --certfile /root/server.crt --keyfile /root/server.key
Now when i start the security with ./tarantella security start it works fine. When i reboot the Server it doesnt works, the Client post an Error it cannot connect to Port 5307. I must start the security command manualy.
What should i do?
Christoph
[759 byte] By [
CISAG] at [2007-11-26 9:13:38]
# 1
Use the SGD webserver start script with --ssl flag in this maner:
./tarantella stop --kill
./tarantella webserver stop
./tarantella start --ssl
./tarantella start
In the start script SGD change the status flag to use ssl in the init SGD script.
Test and reboot the server,
Best Regard磗
Marcelo Moreira Martins
marcelo.martins@m3system.com.br
Technical Consultant - Tarantella Systems Engineer
SE- Systems Engineer - M3 System Integrator.
Sun Microsystems do Brasil - Authorized Reseller
+55-51-3333-2644 - Office
+55-51-81679382- Mobile Phone
Visit the EduSoft web site: http://www.sun.com/edu/edusoft/
# 2
Small update:
./tarantella stop --kill
./tarantella webserver stop
./tarantella webserver start --ssl
./tarantella start
After the reboot the init-script of the webserver will see that the last time it has been started was with the --ssl option and therefore start the webserver again in secure mode.
Not able to connect to port 5307 has nothing to do with the webserver part.
Can you see if the security-connectiontypes are set to "std,ssl"?
/opt/tarantella/bin/tarantella config list --security-connectiontypes
To set it to "std,ssl" use:
/opt/tarantella/bin/tarantella config edit --security-connectiontypes "std,ssl"
Does secure mode function after a reboot and a manual restart of SGD? (use the 4 commands from the top of this message)
- Remold
