search

LarkIT / puppetmodule-aixldap

Install and Setup LDAP client authentication for AIX
0 stars 2 forks source link

Error adding cert with different "name" #3

Open TJM opened 6 years ago

TJM commented 6 years ago

If the cert is already added to the kdb file, but with a different name, the add will fail like so:

Error: /Stage[main]/Aixldap::Configure/Exec[trust-adldap-cert]: Failed to call refresh: 'gsk8capicmd_64 -cert -add -db '/usr/lib/security/adldap.kdb' -pw 'xxxxxx' -type cms -file '/usr/lib/security/adldap.crt' -trust enable -format ascii -label 'adldap'' returned 24 instead of one of [0]
Error: /Stage[main]/Aixldap::Configure/Exec[trust-adldap-cert]: 'gsk8capicmd_64 -cert -add -db '/usr/lib/security/adldap.kdb' -pw 'xxxxxx' -type cms -file '/usr/lib/security/adldap.crt' -trust enable -format ascii -label 'adldap'' returned 24 instead of one of [0]

Workaround: rm /usr/lib/security/adldap.*

TJM commented 5 years ago

This would probably be something best handled by a proper type/provider, rather than random "exec(s)" ... However I do not currently have the time to work on that. I welcome PR's :)

~tommy