SCIENTIFIC-LINUX-USERS Archives

February 2011

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Don Krause <[log in to unmask]>
Reply To:
Don Krause <[log in to unmask]>
Date:
Wed, 2 Feb 2011 11:52:02 -0800
Content-Type:
multipart/signed
Parts/Attachments:
text/plain (1596 bytes) , smime.p7s (4 kB)

On Feb 2, 2011, at 10:30 AM, Don Krause wrote:

> 
> On Feb 1, 2011, at 9:32 PM, Stephan Wiesand wrote:
> 
>> On Feb 2, 2011, at 00:34 , Don Krause wrote:
>> 
>>> Is selinux on a default install of SL6 Beta 1 supposed to prevent ypbind from working?
>> 
>> Probably:
>> 
>> # getsebool -a |grep yp
>> allow_ypbind --> off
>> 
>> Does "setsebool -P allow_ypbind on" make it work?
>> 
>> - Stephan
> 
> I'll reinstall another vm and try it. I believe it may not however, as the startup script tries to allow it and fails for some reason.
> 
> From /etc/init.d/ypbind:
> 
> selinux_on() {
>    [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled || return
>    #echo $"Turning on allow_ypbind SELinux boolean"
>    setsebool allow_ypbind=1
> }
> 
> And:
> 
> start() {
>  ...
>  echo -n $"Starting NIS service: "
>    selinux_on
> 
> 
> And this doesn't work. But I'm also seeing other errors in init scripts, particularly autofs that I'm currently troubleshooting.
> 
> Thanks!


Weird, my second test install using "Basic Server" instead of "Development Workstation",  works as intended, ypbind's init script manages to convince selinux to allow it to work. Not
yet sure why it doesn't work on the other host.

On to the next issue.

(NetworkManager... Seriously?)

--
Don Krause                                                                   
Head Systems Geek, 
Waver of Deceased Chickens.
Optivus Proton Therapy, Inc.
P.O. Box 608
Loma Linda, California 92354
909.799.8327 Tel
909.799.8366 Fax
[log in to unmask]
www.optivus.com
"This message represents the official view of the voices in my head."








ATOM RSS1 RSS2