[Freeipa-users] installation fails

[Rob Crittenden]

Jimmy wrote:
> I temporarily disabled SElinux(echo 0 >/selinux/enforce) and the install
> completed. Did I miss something in the documentation? I didn't see
> anything aboud SElinux in the install doc.

It should work in enforcing mode.

Can you provide the output of this:

ausearch -m avc -ts recent

This will show us the SELinux denials over the last 10 minutes (recent).

rob

> Jimmy
>
> On Fri, Sep 9, 2011 at 1:09 PM, Dmitri Pal <dpal at redhat.com
> <mailto:dpal at redhat.com>> wrote:
>
>     _______________________________________________ Freeipa-users
>     mailing list Freeipa-users at redhat.com
>     <mailto:Freeipa-users at redhat.com>
>     https://www.redhat.com/mailman/listinfo/freeipa-users
>     What is the package version of pki-core, 389 and ipa packages?
>     Also are there any leftovers of the DS instances from the past?
>     There have been problems that earlier installs failed leaving things
>     around and the later install stumbles on those.
>     Also what is the SELinux setting? There might be some SELinux issue
>     due to incorrect labeling in the past.
>     I suggest you make sure the machine is cleaned from any DS instances
>     and try again.
>     For that do ipa-server-install --uninstall several times (3) as each
>     time it might detect and clean different leftovers. We have tickets
>     to make this cleanup better in the future.
>     After that check if there are any other DS instances still around.
>     They will be in /etc/dirsrv/slapd-*
>     If there are you can remove them manually or use remove-ds.pl
>     <http://remove-ds.pl>.
>
>
>     But before you do that please tar and send all the logs for ipa, CS,
>     DS so that we can see what the cause of the problem actually was.
>
>     --
>     Thank you,
>     Dmitri Pal
>
>     Sr. Engineering Manager IPA project,
>     Red Hat Inc.
>
>
>     -------------------------------
>     Looking to carve out IT costs?
>     www.redhat.com/carveoutcosts/  <http://www.redhat.com/carveoutcosts/>
>
>
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users