master: 861d1bbdca4793fb45fb233d236d3793cc23da36

Is 7390 a normal port for dirsrv to bind to?

No. We use 2 separate instances of dirsrv in IPA, one for storing user data and one for use by dogtag to store certificates.

Ok lets add 

network_port(dogtag, tcp,7390,s0)

corenet_tcp_bind_dogtag_port(dirsrv_t)

however slightly different:

Info: Searching AVC errors produced since 1300223410.91 (Tue Mar 15 17:10:10 2011)
Searching logs...
Running '/usr/bin/env LC_ALL=en_US.UTF-8 /sbin/ausearch -m AVC -m USER_AVC -m SELINUX_ERR -ts 03/15/2011 17:10:10 < /dev/null >/mnt/testarea/tmp.rhts-db-submit-result.nc659X 2>&1'
----
time->Tue Mar 15 17:24:23 2011
type=SYSCALL msg=audit(1300224263.080:102): arch=c000003e syscall=49 success=yes exit=0 a0=7 a1=7fff3e7a29a0 a2=1c a3=0 items=0 ppid=13856 pid=13857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ns-slapd" exe="/usr/sbin/ns-slapd" subj=unconfined_u:system_r:dirsrv_t:s0 key=(null)
type=AVC msg=audit(1300224263.080:102): avc:  denied  { name_bind } for  pid=13857 comm="ns-slapd" src=7390 scontext=unconfined_u:system_r:dirsrv_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=tcp_socket
----
time->Tue Mar 15 17:24:23 2011
type=SYSCALL msg=audit(1300224263.081:103): arch=c000003e syscall=4 success=yes exit=0 a0=7fff3e7a1cd0 a1=7fff3e7a1c10 a2=7fff3e7a1c10 a3=7fff3e7a1a40 items=0 ppid=13856 pid=13857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ns-slapd" exe="/usr/sbin/ns-slapd" subj=unconfined_u:system_r:dirsrv_t:s0 key=(null)
type=AVC msg=audit(1300224263.081:103): avc:  denied  { read } for  pid=13857 comm="ns-slapd" name="key3.db" dev=dm-0 ino=174685 scontext=unconfined_u:system_r:dirsrv_t:s0 tcontext=unconfined_u:object_r:dirsrv_config_t:s0 tclass=lnk_file
Fail: AVC messages found.
Checking for errors...
Using stronger AVC checks.
	Define empty RHTS_OPTION_STRONGER_AVC parameter if this causes any problems.
Running 'cat /mnt/testarea/tmp.rhts-db-submit-result.nc659X | /sbin/ausearch -m AVC -m SELINUX_ERR'
Fail: AVC messages found.
Running 'cat %s | /sbin/ausearch -m USER_AVC >/mnt/testarea/tmp.rhts-db-submit-result.NKahNU 2>&1'
Info: No AVC messages found.
/bin/grep 'avc: ' /mnt/testarea/dmesg.log | /bin/grep --invert-match TESTOUT.log
No AVC messages found in dmesg
Running '/usr/sbin/sestatus'
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   permissive
Mode from config file:          enforcing
Policy version:                 24
Policy from config file:        targeted
Running 'rpm -q selinux-policy || true'
selinux-policy-3.7.19-78.el6.noarch

    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
For beta release notes: Please run IPA testing with the SELinux in permissive mode.

verified: no technical note required.  No ns-slapd AVCs observed with latest RHEL 6.1 build.

version:
ipa-server-2.0.0-16.el6.x86_64

Also to note:  ipa-server-selinux-2.0.0-16.el6.x86_64

Please disregard comment #8

Deleted Technical Notes Contents.

Old Contents:
For beta release notes: Please run IPA testing with the SELinux in permissive mode.

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHEA-2011-0631.html