Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-21 Thread Sigbjorn Lie
On 09/21/2012 02:47 PM, Rob Crittenden wrote: Simo Sorce wrote: - Original Message - Sigbjorn Lie wrote: On 09/20/2012 10:17 PM, Rob Crittenden wrote: bind isn't my strongest suite. My guess is that this file is the ccache for bind. I'm guessing that 25 is the UID of the named user.

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-21 Thread Rob Crittenden
Simo Sorce wrote: - Original Message - Sigbjorn Lie wrote: On 09/20/2012 10:17 PM, Rob Crittenden wrote: bind isn't my strongest suite. My guess is that this file is the ccache for bind. I'm guessing that 25 is the UID of the named user. If this is the case, then it should be safe to

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-20 Thread Simo Sorce
- Original Message - > Sigbjorn Lie wrote: > > On 09/20/2012 10:17 PM, Rob Crittenden wrote: > >> bind isn't my strongest suite. > >> > >> My guess is that this file is the ccache for bind. I'm guessing > >> that > >> 25 is the UID of the named user. If this is the case, then it > >> should

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-20 Thread Sigbjorn Lie
On 09/20/2012 10:34 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/20/2012 10:17 PM, Rob Crittenden wrote: bind isn't my strongest suite. My guess is that this file is the ccache for bind. I'm guessing that 25 is the UID of the named user. If this is the case, then it should be safe to st

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-20 Thread Rob Crittenden
Sigbjorn Lie wrote: On 09/20/2012 10:17 PM, Rob Crittenden wrote: bind isn't my strongest suite. My guess is that this file is the ccache for bind. I'm guessing that 25 is the UID of the named user. If this is the case, then it should be safe to stop named, rename the file, and restart. Perhaps

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-20 Thread Sigbjorn Lie
On 09/20/2012 10:17 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/20/2012 12:08 AM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/19/2012 11:05 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/19/2012 10:48 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, I noticed an updated

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-20 Thread Rob Crittenden
Sigbjorn Lie wrote: On 09/20/2012 12:08 AM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/19/2012 11:05 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/19/2012 10:48 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, I noticed an updated krb5-server package today advertising that it's

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-20 Thread Sigbjorn Lie
On 09/20/2012 12:08 AM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/19/2012 11:05 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/19/2012 10:48 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, I noticed an updated krb5-server package today advertising that it's fixing the issue wit

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-19 Thread Rob Crittenden
Sigbjorn Lie wrote: On 09/19/2012 11:05 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/19/2012 10:48 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, I noticed an updated krb5-server package today advertising that it's fixing the issue with slow GSSAPI binds discussed earlier, so I ins

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-19 Thread Sigbjorn Lie
On 09/19/2012 11:05 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 09/19/2012 10:48 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, I noticed an updated krb5-server package today advertising that it's fixing the issue with slow GSSAPI binds discussed earlier, so I installed it in my test

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-19 Thread Sigbjorn Lie
Ok. I'm fairly new to selinux but I will give it a go tomorrow. Thanks. Rgds S. Rob Crittenden wrote: >Sigbjorn Lie wrote: >> On 09/19/2012 10:48 PM, Rob Crittenden wrote: >>> Sigbjorn Lie wrote: Hi, I noticed an updated krb5-server package today advertising that >it's fixi

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-19 Thread Rob Crittenden
Sigbjorn Lie wrote: On 09/19/2012 10:48 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, I noticed an updated krb5-server package today advertising that it's fixing the issue with slow GSSAPI binds discussed earlier, so I installed it in my test environment, set SElinux back to enforcing in /

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-19 Thread Sigbjorn Lie
On 09/19/2012 10:48 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, I noticed an updated krb5-server package today advertising that it's fixing the issue with slow GSSAPI binds discussed earlier, so I installed it in my test environment, set SElinux back to enforcing in /etc/sysconfig/selinux

Re: [Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-19 Thread Rob Crittenden
Sigbjorn Lie wrote: Hi, I noticed an updated krb5-server package today advertising that it's fixing the issue with slow GSSAPI binds discussed earlier, so I installed it in my test environment, set SElinux back to enforcing in /etc/sysconfig/selinux and rebooted. The named daemon does not start

[Freeipa-users] krb5-server-1.9-33.el6_3.3.x86_64 prevents named from starting when selinux is enforcing

2012-09-19 Thread Sigbjorn Lie
Hi, I noticed an updated krb5-server package today advertising that it's fixing the issue with slow GSSAPI binds discussed earlier, so I installed it in my test environment, set SElinux back to enforcing in /etc/sysconfig/selinux and rebooted. The named daemon does not start now. The error b