<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
All<br>
<br>
I just found the culprit for the selinux error<br>
<br>
I have the user's home dir automatically created when I was testing
the account was working.<br>
<br>
ssh <a class="moz-txt-link-abbreviated" href="mailto:user2@mail02.example.com">user2@mail02.example.com</a>... etc<br>
<br>
for some reason, the selinux context of the users homedir is set to
home_root_t instead of user_home_dir_t.<br>
<br>
once a restorecon was run on /home (restorecon -R /home) the selinux
errors disappeared when accessing mail via imap.<br>
<br>
I'll do a write up of the details for the wiki so it is documented.<br>
<br>
<br>
Dale<br>
<br>
<br>
<br>
On 01/31/2012 04:40 PM, Dale Macartney wrote:<br>
<span style="white-space: pre;">><br>
> thanks Siggi,<br>
><br>
> I was just browsing past those mails from earlier today as
well... I'll<br>
> make those changes before it goes on the wiki.<br>
><br>
><br>
><br>
> On 01/31/2012 04:37 PM, Sigbjorn Lie wrote:<br>
> > On 01/31/2012 05:07 PM, Dale Macartney wrote:<br>
> >><br>
> >> sed -i "s-#auth_krb5_keytab =-auth_krb5_keytab =
/etc/krb5.keytab-g"<br>
> >> /etc/dovecot/conf.d/10-auth.conf<br>
> >><br>
><br>
> > Perhaps I could recommend to retreive the imap/imaps
keytabs into a<br>
> seperate keytab file, and configure the auth_krb5_keytab
config file<br>
> option in dovecot.conf to point to this file. This increases
the<br>
> security by a tenfold as pointed out earlier in this thread.<br>
><br>
><br>
><br>
> > Regards,<br>
> > Siggi<br>
><br>
> > _______________________________________________<br>
> > Freeipa-users mailing list<br>
> > <a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br>
> > <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
></span><br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.11 (GNU/Linux)<br>
Comment: Using GnuPG with Mozilla - <a class="moz-txt-link-freetext" href="http://enigmail.mozdev.org/">http://enigmail.mozdev.org/</a><br>
<br>
iQIcBAEBAgAGBQJPKDFpAAoJEAJsWS61tB+qmn4P/32sD+bJJWd2J8XjqFti6lC2<br>
BZhahWgYiEpfwgGX5B3YSwx7v6URq+dYdp0ZIYJFTAMitq6qDD8Y0wJ7bpd1zxb1<br>
GyVLDDBxkpzLOSFe21CqQVsWvOLU9AHlOWcT4AaKYU8M2s4XqyIqiY8WduAzJcen<br>
l1Q2yryZ6uAYdpLsG4WHxu9WvfSE+85K0cvFlc302tVa/JyML40gsRueRN7gRAHa<br>
zhPOu605ZgEP890CvP1jHN77hH7WU52MZqBJrscnFIbxEhuJtjMzXIPcGeJev+TR<br>
aHiBzdGVsQUssFAL6B589l+Q3NxRSlU/zxCk9pERF3Ql8m/YPnlBiTdqa0Am3y6+<br>
PJF5ggmkDIeWCWuJwT9f1Rpm2zF/ooytnPlcIfm3hbETHFdzPjNBH52M/whXrCx6<br>
XdUw5Bk3sYkSdmrbgjqVY/gz+We3JzkWBPbiKf1I8DD7EOTT4lb5BNxsSKAslwZn<br>
apbnIcTkMn9du22zIn5/o1iYbnUi52BEJkTj0ZNrmNDeVNMYA/A/ssUcC4ecEiql<br>
aIDftfH+2sFvzDBIyB1eygibpcI2ILTy4J8gwLSAZyZ3oF65icnfTUldkqB/JBC8<br>
6yVJKXMNIojTQo7NKaBJ3pDF1mALLzfXldGOqxudF7U7TlhGyvqA+SpTPxA9IM77<br>
qKHqWoOCfTci/4C+ncLn<br>
=0kQn<br>
-----END PGP SIGNATURE-----<br>
<br>
</body>
</html>