[28434] in Kerberos
Re: Cannot lock database
daemon@ATHENA.MIT.EDU (Nate Johnson)
Wed Sep 19 13:13:28 2007
Message-ID: <46F12D0F.7030003@iu.edu>
Date: Wed, 19 Sep 2007 10:07:11 -0400
From: Nate Johnson <natejohn@iu.edu>
MIME-Version: 1.0
To: Nalin Dahyabhai <nalin@redhat.com>
In-Reply-To: <20070917202155.GB17266@redhat.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Nalin Dahyabhai wrote:
> On Mon, Sep 17, 2007 at 11:46:36AM -0400, Nate Johnson wrote:
> Shot in the dark: is it RHEL 5.0 with SELinux in enforcing mode?
>
> If it is, try running "restorecon -R -v /var/kerberos/krb5kdc". That'll
> set the labels on the database files to values which the policy allows
> kadmind to manipulate.
Nalin, thanks for the note. Its actually hardened-gentoo:
# uname -a
Linux <kdc> 2.4.32-hardened-r6 #1 SMP Mon Oct 30 22:02:46 UTC 2006 i686
Intel(R) Xeon(TM) CPU 2.80GHz GenuineIntel GNU/Linux
Thanks,
Nate
- --
* Nate Johnson, Lead Security Engineer, GCIH
* University Information Security Office, Indiana University
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)
iD8DBQFG8S0PGQUVGJudcw4RAvuJAJ47loYHEfZMsRzbAG12CYkMHx7fVgCeIqD2
E0HHDv/6eI5MhTtOVXE/ArQ=
=WqBk
-----END PGP SIGNATURE-----
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
