On 05/13/2011 02:59 AM, Stephan Wiesand wrote:
>
> the client will work if everything is labelled correctly, and we took care that this is true after installation of the packages, no matter whether under anaconda or later from yum. That's also why we changed the default cache location.
>
> On the server side, this work hasn't been done yet. In addition, the policy is not quite complete and will prevent the fileserver from running successfully even if all labels are what restorecon will make them. There's at least a problem with the fssync.sock, but maybe more.
>
> The fileserver *should* work with SELinux in enforcing mode, as long as the init script has type unconfined_exec_t.
> But of course that's cheeting.
>
> In any case, please keep in mind that the OpenAFS in SL6 is still a prerelease, though a relatively advanced and mature one. But if you want to run a production server, I recommend SL5 for the time being. More feedback on the SL6 one is of course very welcome.

Thanks for the information, that was helpful.  Sounds like you guys are 
working on it.  I'll come back to this later then.

-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA/CoRA Division                    FAX: 303-415-9702
3380 Mitchell Lane                  [log in to unmask]
Boulder, CO 80301              http://www.cora.nwra.com