Hide Forgot
Description of problem: selinux warning message while installing ipa-server on RHEL 6.3. ==================================================== [12/14]: configuring SELinux for httpd WARNING: could not set selinux boolean(s) httpd_can_network_connect,httpd_manage_ipa to true. The web interface may not function correctly until this boolean is successfully change with the command: /usr/sbin/setsebool -P httpd_can_network_connect,httpd_manage_ipa true Try updating the policycoreutils and selinux-policy packages. [13/14]: restarting httpd [14/14]: configuring httpd to start on boot Version-Release number of selected component (if applicable): ipa-server-2.2.0-4.el6.x86_64 How reproducible: Steps to Reproduce: 1. install ipa-server Actual results: install output includes the warning Expected results: No such warning Additional info: ab had seen this warning yesterday, and has checked in a change. expecting fix in next build.
fixed upstream master: f6077c46b373cdd9dbc1c7618d067921df0cedb0 ipa-2-2: 5e08fa6efd9edfef875154300e427765b0a009a9
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: No documentation needed.
Verified using: ipa-server-2.2.0-11.el6.x86_64 install log includes: 2-05-01T12:45:52Z DEBUG [11/14]: clean up any existing httpd ccache 2012-05-01T12:45:52Z DEBUG duration: 0 seconds 2012-05-01T12:45:52Z DEBUG [12/14]: configuring SELinux for httpd 2012-05-01T12:45:52Z DEBUG args=/usr/sbin/selinuxenabled 2012-05-01T12:45:52Z DEBUG stdout= 2012-05-01T12:45:52Z DEBUG stderr= 2012-05-01T12:45:52Z DEBUG args=/usr/sbin/getsebool httpd_can_network_connect 2012-05-01T12:45:52Z DEBUG stdout=httpd_can_network_connect --> off 2012-05-01T12:45:52Z DEBUG stderr= 2012-05-01T12:45:52Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2012-05-01T12:45:52Z DEBUG args=/usr/sbin/getsebool httpd_manage_ipa 2012-05-01T12:45:52Z DEBUG stdout=httpd_manage_ipa --> off 2012-05-01T12:45:52Z DEBUG stderr= 2012-05-01T12:45:52Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2012-05-01T12:46:19Z DEBUG args=/usr/sbin/setsebool -P httpd_can_network_connect=true httpd_manage_ipa=true 2012-05-01T12:46:19Z DEBUG stdout= 2012-05-01T12:46:19Z DEBUG stderr= 2012-05-01T12:46:19Z DEBUG duration: 27 seconds 2012-05-01T12:46:19Z DEBUG [13/14]: restarting httpd 2012-05-01T12:46:19Z DEBUG args=/sbin/service httpd status
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0819.html