ldap and hosts

[Paul Howarth]

On Tue, 2006-04-11 at 00:39 -0700, Gordon Messmer wrote:
> Andrew wrote:
> > If I type getent hosts I see the complete list of 
> > hosts as it should be but if I try to ping one of the hosts it just 
> > hangs.
> 
> Check your selinux audit logs.  The policy for ping might be too strict.

Something that might be worth trying if you think it might be SELinux
is:

# setsebool allow_ypbind 1

I know LDAP isn't NIS but this enables much of what's needed for LDAP
too.

Paul.