Description of problem: SELinux prevents creation of /var/cache/samba/smb_krb5 by samba(smb) This prevents `net ads join -U administrator` from working properly. Version-Release number of selected component (if applicable): $ rpm -qa | grep sam samba-common-3.0.28-0.el5.8 samba-3.0.28-0.el5.8 samba-client-3.0.28-0.el5.8 system-config-samba-1.2.39-1.el5 $ rpm -qa | grep sel libselinux-1.33.4-5.el5 libselinux-python-1.33.4-5.el5 selinux-policy-2.4.6-137.el5 selinux-policy-targeted-2.4.6-137.el5 How reproducible: Everytime Steps to Reproduce: 1. Configure system per directions at http://www.planetmy.com/blog/how-to-join-fedora-core-6-samba-server-to-windows-2003-active-directory/ 2. Execute `net ads join -U administrator` Actual results: # net ads join -U administrator [2008/10/08 09:41:22, 0] libads/kerberos.c:create_local_private_krb5_conf_for_domain(651) create_local_private_krb5_conf_for_domain: failed to create directory /var/cache/samba/smb_krb5. Error was Permission denied I've also attached /var/log/audit/audit.log messages, see smb_krb5-denied.txt. Expected results: No error message... /var/cache/samba/smb_krb5 is silently created. Additional info:
Created attachment 319757 [details] denied messages from /var/log/audit/audit.log
restorecon /etc/krb5.conf Everything else is Fixed in selinux-policy-3.3.1-100.fc9 You can add these rules for now using # grep avc /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp
Closing all bugs that have been in modified for over a month. Please reopen if the bug is not actually fixed.