[pubcookie-users] Pubcookie 3 security_context: can't accesskrypt
key file ...(try setting crypt_key)
jbolz at u.washington.edu
Thu Jul 31 14:04:40 PDT 2008
I will double-check the timeserver issue, the ...\keys\localhost was a
generic message, I think. We do have a UW Cert, registered w/ uw
pubcookie server, and the install did not hang at all.
Just in case - I just did the time settings on all domain controllers, &
the IIS server, uninstalled pubcookie, removed registry settings.
re-added the isapi filter
turned on uwnetID (auth)
called the webapp, via IE7, DID go thru uwnetid logon, then it hangs on
application pools are running as Network Service
Any further help?
phone: 206 543-7868
David T Grayston wrote:
> The error may indicate a time discrepency on your server and the
> weblogin.washington.edu servers. Check for acurate time on your server.
> Similar error can happen if your client computer as obtained a pubcookie
> cookie from the server and you then re-start IIS. Close and restart the
> client to get a new pubcookie cookie.
> As for the SSL cert = DNS, Alex is correct but since your server's DNS must
> be registered with the pubcookie login servers here at the UW and if that
> wasn't true your installation should fail.
> David T. Grayston Systems & Network Administrator
> University of Washington
> School of Public Health and Community Medicine
> Office of the Dean
> 206.685.0977 (voice) | 206.914.3772 (Cell) | 206.543.3813 (FAX)
>>From: pubcookie-users-bounces at mailman1.u.washington.edu
>>[mailto:pubcookie-users-bounces at mailman1.u.washington.edu] On
>>Behalf Of J. Alex Lang
>>Sent: Thursday, July 31, 2008 12:17 PM
>>To: Jane Bolz
>>Cc: pubcookie-users at u.washington.edu
>>Subject: Re: [pubcookie-users] Pubcookie 3 security_context:
>>can't accesskrypt key file ...(try setting crypt_key)
>>Given that the keyfile it's looking for is called "localhost"
>>I'd say that your problem is actually there; unless the
>>keyfile really is called that.
>>I was under the impression that the keyfile needs to match
>>the hostname that the SSL certificate has (the DN of the
>>cert's X.509 info).
>>Jane Bolz wrote:
>>>I've had an app running fine on a new MS2003 server w/ sp2.
>>>installed pubcookie to do the authentication, but can't
>>seem to get it
>>>The msi install went fine, no hangups. Created the pubcookie key.
>>>The server key as well was put into the keys folder by the install.
>>J. Alex Lang
>>Director of Information Technology for Campus Services
>>Carnegie Mellon University
>>6555 Penn Avenue, Room 152
>>Pittsburgh, PA 15206
>>pubcookie-users mailing list
>>pubcookie-users at u.washington.edu
> pubcookie-users mailing list
> pubcookie-users at u.washington.edu
More information about the pubcookie-users