<font size=2 face="sans-serif">[root@replicahostname ~]# sestatus</font>
<br><font size=2 face="sans-serif">SELinux status:
disabled</font>
<br><font size=2 face="sans-serif">[root@replicahostname ~]# audit2why
-b -w -t avc</font>
<br><font size=2 face="sans-serif">[root@replicahostname ~]#</font>
<br>
<br>
<br><font size=2 face="sans-serif">Nothing in the audit log after audit2why
came back either.</font>
<br>
<br>
<br><font size=2 face="sans-serif">Thank You,</font>
<br><font size=2 face="sans-serif"><b>Rashard Kelly</b></font><font size=2 face="sans-serif"><b><br>
</b></font>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">Alexander Bokovoy <abokovoy@redhat.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif">Rashard.Kelly@sita.aero</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Cc:
</font><font size=1 face="sans-serif">Sumit Bose <sbose@redhat.com>,
freeipa-users@redhat.com</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">04/11/2014 09:06 AM</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">Re: [Freeipa-users]
ipa: ERROR: did not receive Kerberos credentials</font>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=2>On Fri, 11 Apr 2014, Rashard.Kelly@sita.aero wrote:<br>
>futex(0x7f0e2e1462c0, FUTEX_WAKE_PRIVATE, 2147483647) = 0<br>
>open("/tmp/krb5cc_1599100000_CUkupo", O_RDONLY) = -1 EACCES
(Permission<br>
>denied)<br>
<br>
Are you sure you don't have SELinux really running and enabled?<br>
<br>
Because the following output makes me really worry:<br>
>> [root@replicahostname /tmp]# ll -Za<br>
>> drwxrwxrwt. root root system_u:object_r:tmp_t:s0
.<br>
>> dr-xr-xr-x. root root system_u:object_r:root_t:s0
..<br>
>> -rw------- rkelly rkelly ? .bash_history<br>
>> drwxrwxrwt root root ?
.ICE-unix<br>
>> drwxrwxr-x rkelly rkelly ?
.ipa<br>
>> -r-------- root root ?
krb5cc_0<br>
>> -r-------- xs05144 xs05144 ? krb5cc_1599000020_u5RRhd<br>
>> -r-------- rkelly rkelly ? krb5cc_1599100000_CUkupo<br>
>> -r-------- rkelly rkelly ? krb5cc_1599100000_ZekyY0<br>
These rkelly:rkelly krb5cc_* files have no SELinux label and should be<br>
readable to the owner.<br>
<br>
Can you show:<br>
<br>
[root] # sestatus<br>
[root] # audit2why -b -w -t avc<br>
<br>
<br>
-- <br>
/ Alexander Bokovoy<br>
</font></tt>
<br><BR/><p>
This document is strictly confidential and intended only for use by the
addressee unless otherwise stated. If you are not the intended recipient,
please notify the sender immediately and delete it from your system.
See you at 2014 Air Transport IT Summit, 17-19 June 2014
Click here to register http://www.sitasummit.aero
</p>