Bug 490461

Summary: File based publishing fails with no traces
Product: [Retired] Dogtag Certificate System Reporter: Kashyap Chamarthy <kchamart>
Component: PublishingAssignee: Andrew Wnuk <awnuk>
Status: CLOSED ERRATA QA Contact: Chandrasekar Kannan <ckannan>
Severity: medium Docs Contact:
Priority: urgent    
Version: unspecifiedCC: benl, cfu, dpal, mharmsen
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-07-22 23:33:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 443788    
Attachments:
Description Flags
proposed fix none

Description Kashyap Chamarthy 2009-03-16 15:10:00 UTC
Description of problem:

File based publishing does not work. 
Environment - RHEL-5.3;x86; selniux-enforcing;

Version:
pki-ca-8.0.0-11.alpha

Steps to Reproduce:

1. logged into the CA admin console.
2. Enabled Publishing & Default LDAP connection and saved it.
3. Created a publisher ("fielpublishing") with the below config.
     directory - /var/lib/pki-ca/publish
     Filename.b64 - Enabled
4. Disabled all existing rules and created a new rule("rule1") with the below config.
       type- certs
       no predicate(left it  blank)
       mapper - NoMap
       publisher - fielpublishing
5. Saved the configuration, restarted pki-ca.
6. Enrolled a certificate(with UID "ftest1") with  profile "Manual User Dual-Use Certificate Enrollment"

Here, I  could not find the base 64 encoded cert(for "ftest1") when I checked in /var/lib/pki-ca/publish (which has 777 permissions and owner/group as pkiuser) ?? 

  
Actual results:
Nothing is published to the /var/lib/pki-ca/publish directory.

Expected results:
user certificate should be published to /var/lib/pki-ca/publish  directory.

Additional Info:
- Selinux does not provide any error messages when I try to do the above.
- /var/lib/pki-ca/logs/debug does not provide much info.

Please let me know if additional information is required.

Comment 1 Andrew Wnuk 2009-03-17 21:43:58 UTC
Created attachment 335610 [details]
proposed fix

Comment 2 Matthew Harmsen 2009-03-17 21:49:09 UTC
attachment (id=335610) +mharmsen

Comment 3 Andrew Wnuk 2009-03-17 21:54:32 UTC
svn commit pki/dogtag/common/pki-common.spec                           
Sending        pki/dogtag/common/pki-common.spec
Transmitting file data .
Committed revision 301.

svn commit pki/base/common/src/com/netscape/cmscore/ldap/PublisherProcessor.java                      
Sending        pki/base/common/src/com/netscape/cmscore/ldap/PublisherProcessor.java
Transmitting file data .
Committed revision 302.

Comment 4 Kashyap Chamarthy 2009-05-31 14:54:31 UTC
Verified(with build: Tue 19 May09). File based publishing works fine.Both base64 and der encoded certs are published