Description of problem:
nss-pam-ldapd should be allowed to connect to LDAP port. Otherwise, users and groups from remote LDAP directory cannot be retrieved:

/var/log/messages:
Jul 10 04:28:03 localhost nslcd[31207]: [8b4567] failed to bind to LDAP server ldap://vm-086.idm.lab.   bos.redhat.com: Can't contact LDAP server: Transport endpoint is not connected

And now the AVC:

/var/log/audit/audit.log:
type=AVC msg=audit(1341909026.610:1763): avc:  denied  { name_connect } for  pid=31539 comm="nslcd"     dest=389 scontext=system_u:system_r:nslcd_t:s0 tcontext=system_u:object_r:ldap_port_t:s0                tclass=tcp_socket
type=SYSCALL msg=audit(1341909026.610:1763): arch=c000003e syscall=42 success=no exit=-13 a0=b          a1=7f20c400a260 a2=10 a3=7f20d71c25e0 items=0 ppid=1 pid=31539 auid=4294967295 uid=0 gid=0 euid=0       suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nslcd" exe="/usr/sbin/nslcd"       subj=system_u:system_r:nslcd_t:s0 key=(null)


Version-Release number of selected component (if applicable):
selinux-policy-3.10.0-134.fc17.noarch
selinux-policy-targeted-3.10.0-134.fc17.noarch
nss-pam-ldapd-0.7.16-2.fc17.x86_64


How reproducible:

Steps to Reproduce:
1. Configure nslcd to read user&group data from remote LDAP
2. Try to read the user from remote LDAP (e.g. via "getent user $USER")
3.
  
Actual results:
User is not read as nslcd cannot connect to remote LDAP.

Expected results:
nslcd can connect to remote LDAP, user is read.