iPrint Appliance 2 apache fails to start

[nwmighty]

Hi All,

Not sure if any one has had the same issue. Deployed new iPrint Appliance 2, once the initial configuration page has been completed server boots up with error the apache2 failed. Log in apache2 displays;
###################################################################
LDAPDN: Could not open SSL trusted certificate authority file-/etc/opt/novell/certs/SSCert.pem
Syntax error on line 21 of /etc/opt/novell/httpd/conf.g/iprint_f.conf:
Invalid global certificate file.

Cheers.

[Anonymous_User]

On 03/17/2016 05:06 AM, nwmighty wrote:
>
> Hi All,
>
> Not sure if any one has had the same issue. Deployed new iPrint
> Appliance 2, once the initial configuration page has been completed
> server boots up with error the apache2 failed. Log in apache2 displays;
>
> ###################################################################
> LDAPDN: Could not open SSL trusted certificate authority
> file-/etc/opt/novell/certs/SSCert.pem
> Syntax error on line 21 of /etc/opt/novell/httpd/conf.g/iprint_f.conf:
> Invalid global certificate file.
>
> Cheers.
>
>

I did not see this issue previously but it looks like a failure when
creating the CA certificate. provide:

1. is it vmware, xen, hyper-v, etc install platform ?
2. Syntax error is a typo? there is no conf.g nor iprint_f.conf
3. Verify that SSCert.pem is present:

# l /etc/opt/novell/certs/SSCert.pem

4. If it is there, type:

# keytool -printcert -v -file /etc/opt/novell/certs/SSCert.pem

What do you get?

5. Check /var/opt/novell/log/iprintmobile/config_appliance.log to see if
any error was reported during install/configuration

[Anonymous_User]

On 03/17/2016 11:27 AM, Mysterious wrote:
> On 03/17/2016 05:06 AM, nwmighty wrote:
>>
>> Hi All,
>>
>> Not sure if any one has had the same issue. Deployed new iPrint
>> Appliance 2, once the initial configuration page has been completed
>> server boots up with error the apache2 failed. Log in apache2 displays;
>>
>> ###################################################################
>> LDAPDN: Could not open SSL trusted certificate authority
>> file-/etc/opt/novell/certs/SSCert.pem
>> Syntax error on line 21 of /etc/opt/novell/httpd/conf.g/iprint_f.conf:
>> Invalid global certificate file.
>>
>> Cheers.
>>
>>
>
> I did not see this issue previously but it looks like a failure when
> creating the CA certificate. provide:
>
> 1. is it vmware, xen, hyper-v, etc install platform ?
> 2. Syntax error is a typo? there is no conf.g nor iprint_f.conf
> 3. Verify that SSCert.pem is present:
>
> # l /etc/opt/novell/certs/SSCert.pem
>
> 4. If it is there, type:
>
> # keytool -printcert -v -file /etc/opt/novell/certs/SSCert.pem
>
> What do you get?
>
> 5. Check /var/opt/novell/log/iprintmobile/config_appliance.log to see if
> any error was reported during install/configuration

Sorry, it is this one:

/var/opt/novell/log/iprintmobile_local/config_appliance.log

and this one:

/var/opt/novell/eDirectory/log/pki_install.log and pkiserver.log

[nwmighty]

It's vmware. Checked /etc/opt/novell/certs/SSCert.pem and the cert does not exist.

[nwmighty]

This must be a vmware build error.
As mentioned created a new instance once the appliance boots up error message found in /var/log/apache2/rcapache2.out

LDAPDN: Could not open SSL trusted certificate authority file-/etc/opt/novell/certs/SSCert.pem
Syntax error on line 21 of /etc/opt/novell/httpd/conf.g/iprint_f.conf:
Invalid global certificate file.

Line 21 indicates the location for SSCert.pem but SSCert.pem does not exist in this location because it's was never created.

We are tying to migrate from a 1.1 appliance but this not not possible due to this error.

[thsundel]

nwmighty;2423315 wrote:
This must be a vmware build error.
As mentioned created a new instance once the appliance boots up error message found in /var/log/apache2/rcapache2.out

LDAPDN: Could not open SSL trusted certificate authority file-/etc/opt/novell/certs/SSCert.pem
Syntax error on line 21 of /etc/opt/novell/httpd/conf.g/iprint_f.conf:
Invalid global certificate file.

Line 21 indicates the location for SSCert.pem but SSCert.pem does not exist in this location because it's was never created.

We are tying to migrate from a 1.1 appliance but this not not possible due to this error.

Have you verified the md5sum of the downloaded media?

Thomas

[nwmighty]

Hi thsundel,

md5sum has been verified.

Looks like when you migrate from an existing appliance and all seems to work fine. When you select "New appliance" the above error occurs.

[restori1]

I'm testing iPrint 2.0.0 on xen environment. After deploying the appliance, I have the same problem, as described above . Apache does not start and the required certificate does not exist.

Regards, Fabrizio

[Anonymous_User]

On 03/22/2016 03:26 PM, restori wrote:
>
> I'm testing iPrint 2.0.0 on xen environment. After deploying the
> appliance, I have the same problem, as described above . Apache does not
> start and the required certificate does not exist.
>
> Regards, Fabrizio
>
>

Any errors in the logs?

/var/opt/novell/log/iprintmobile_local/config_appliance.log

and this one:

/var/opt/novell/eDirectory/log/pki_install.log and pkiserver.log

[restori1]

>>Any errors in the logs?
>>
>>/var/opt/novell/log/iprintmobile_local/config_appliance.log
>>
>>and this one:
>>
>>/var/opt/novell/eDirectory/log/pki_install.log and pkiserver.log

The directory /var/opt/novell/log/iprintmobile_local/ does not exist. There are /var/opt/novell/log/iprintmobile and it's empty

/var/opt/novell/eDirectory/log/pki_install.log and pkiserver.log doesn't exist, the I'm not able to configure the appliance, becouse apache doesn't start, and eDirectory was not yet created

[Anonymous_User]

On 03/22/2016 04:06 PM, restori wrote:
>
>>> Any errors in the logs?
>>>
>>> /var/opt/novell/log/iprintmobile_local/config_appliance.log
>>>
>>> and this one:
>>>
>>> /var/opt/novell/eDirectory/log/pki_install.log and pkiserver.log
>
> The directory /var/opt/novell/log/iprintmobile_local/ does not exist.
> There are /var/opt/novell/log/iprintmobile and it's empty
>
> /var/opt/novell/eDirectory/log/pki_install.log and pkiserver.log doesn't
> exist, the I'm not able to configure the appliance, becouse apache
> doesn't start, and eDirectory was not yet created
>
>

This is very strange

1. Could you finish installing the linux part of the appliance, till
point you to use the web console to configure it?
2. When it ask you for the domain name during the linux install part,
what is the exact name you entered?
3. When it asked you for the dns name to sue with print manager, did you
use the same one as the domain name during linux setup part?

[restori1]

Yes i finish the install. The error appears on the first stage of appliance initializatio , before the mysql tables creation (I'll try to take a screenshot).
The error is repeated at reboot.
I'm not able to use web console. Apache doesn't start.
My domain name is thermoking.it, the appliance name is iprint.thermoking.it