Re: [OT] SELinux woes

[Patrick Lists <openldap-list@puzzled.xs4all.nl>]

On 01/17/2013 07:11 AM, Ori Bani wrote:
> All,
>
> Trying to switch to slapd.conf instead of dynamic configuration in
> order to test the back-sql backend I ran into a problem with SELinux
> that I do not understand.
>
> The startup fails with the error:
>
> /etc/openldap/slapd.conf: line 27: invalid path: Permission denied

They probably have the wrong labels since you created new directories. 
So SELinux does what it then should do: block. Did you do a restorecon 
on the new directories?

# restorecon -v -F -R /etc/openldap
# restorecon -v -F -R /var/lib/ldap

The reason that SELinux blocks something should show up as an AVC in 
/var/log/audit/auditd.log.

Regards,
Patrick