[pubcookie-users] Pubcookie 3 security_context: can't accesskrypt key file ...(try setting crypt_key)

[Jane Bolz]

David/Alex:
I will double-check the timeserver issue, the ...\keys\localhost was a 
generic message, I think.  We do have a UW Cert, registered w/ uw 
pubcookie server, and the install did not hang at all.

Just in case - I just did the time settings on all domain controllers, & 
the IIS server, uninstalled pubcookie, removed registry settings.

Reinstalled pubcookie

re-added the isapi filter

turned on uwnetID (auth)

called the webapp, via IE7, DID go thru uwnetid logon, then it hangs on
https://pse_c2.pubserv.washington.edu/relay.pubcookie3?appsrvid=pse_c2.pubserv.washington.edu


application pools are running as Network Service

Any further help?

Thanks!

-Jane

phone:  206 543-7868

David T Grayston wrote:

> Jane,

> 

> The error may indicate a time discrepency on your server and the

> weblogin.washington.edu servers.  Check for acurate time on your server.

> 

> Similar error can happen if your client computer as obtained a pubcookie

> cookie from the server and you then re-start IIS. Close and restart the

> client to get a new pubcookie cookie.

> 

> As for the SSL cert = DNS, Alex is correct but since your server's DNS must

> be registered with the pubcookie login servers here at the UW and if that

> wasn't true your installation should fail. 

> 

> David

> 

> ------------------------------------------------------------------

> David T. Grayston     Systems & Network Administrator

> University of Washington   

> School of Public Health and Community Medicine

> Office of the Dean

> 206.685.0977 (voice) | 206.914.3772 (Cell) | 206.543.3813 (FAX)

> 

>  

> 

> 

>>-----Original Message-----

>>From: pubcookie-users-bounces at mailman1.u.washington.edu 

>>[mailto:pubcookie-users-bounces at mailman1.u.washington.edu] On 

>>Behalf Of J. Alex Lang

>>Sent: Thursday, July 31, 2008 12:17 PM

>>To: Jane Bolz

>>Cc: pubcookie-users at u.washington.edu

>>Subject: Re: [pubcookie-users] Pubcookie 3 security_context: 

>>can't accesskrypt key file ...(try setting crypt_key)

>>

>>Given that the keyfile it's looking for is called "localhost" 

>>I'd say that your problem is actually there; unless the 

>>keyfile really is called that.

>>

>>I was under the impression that the keyfile needs to match 

>>the hostname that the SSL certificate has (the DN of the 

>>cert's X.509 info).

>>

>>-Alex

>>

>>Jane Bolz wrote:

>>

>>>Hi!

>>>I've had an app running fine on a new MS2003 server w/ sp2. 

>>

>> Recently 

>>

>>>installed pubcookie to do the authentication, but can't 

>>

>>seem to get it 

>>

>>>to work.

>>>

>>>The msi install went fine, no hangups.  Created the pubcookie key.  

>>>The server key as well was put into the keys folder by the install.

>>>

>>

>>--

>>J. Alex Lang

>>Director of Information Technology for Campus Services 

>>Carnegie Mellon University

>>6555 Penn Avenue, Room 152

>>Pittsburgh, PA 15206

>>

>>_______________________________________________

>>pubcookie-users mailing list

>>pubcookie-users at u.washington.edu

>>http://mailman1.u.washington.edu/mailman/listinfo/pubcookie-users

>>

> 

> 

> _______________________________________________

> pubcookie-users mailing list

> pubcookie-users at u.washington.edu

> http://mailman1.u.washington.edu/mailman/listinfo/pubcookie-users