Re: [Ejbca-develop] CA admin has no access?

[Philip V. <ph...@mu...>]

Hi

Do you get 'authorization denied" or does the browser refuse to connect?
If you get the first kind of error, what CA does your admin group belong to?
If you have the second kind of error, have you imported the ca cert in 
the cacerts file?

see http://docs.primekey.se/documentation/en/appendixes/adminprives.html 
for more tips
// Philip

Jon Bendtsen wrote:

> Hi
>
> I finally got 3.1.2 installed, and has created a certificate and  
> marked it administrator
> but i can not log into ejbca using that. Not even if i take the  
> serial number and write
> it into the administrator group?
>
> I searched after the username, viewed the certificate
>
> Username      dkjbe1
> Certificate nr     1 of 1
> Certificate Version     X509 V.3
> Certificate Serial Number     7E395940D5879C97
> Issuer DN     CN=Laerdal Sophus CA,O=Laerdal Sophus,C=DK
> Valid from     10/13/05
> Valid to     10/12/10
> Subject DN     CN=Jon Bendtsen,OU=CA Administrator,O=Laerdal Sophus,C=DK
> Subject Alternative Name     None
> Public key     RSA ( 2048Bits)
> Basic constraints     End Entity
> Key usage     Digital Signature, Key encipherment
> Extended Key Usage     Server Authentication, Client Authentication ,  
> Email Protection, IPSec End System, IPSec Tunnel, IPSec User, MS  
> Smart Card Logon
> Signature Algorithm     SHA1WithRSAEncryption
> Fingerprint SHA1
>     953C858D56880556C9D426F0B6694D0EFE4E9D3D
> Fingerprint MD5
>     C76709EFF85C0AC2F1CC0A21C2D732BC
> Revoked
>     No
>
> and copied         7E395940D5879C97            which i typed in under  
> the serialnumber prio 11 wioth qeual, it it is listed.
> I also tried with common name, and even with country, But i still can  
> not connect.
>
> I can connect using the superadmin certificate.
>
>
>
> JonB
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads, discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop