Command returns the result:<br>root@ipaserver:/tmp/freeipa-4.3.1# /usr/sbin/setsebool -P httpd_can_network_connect=on httpd_run_ipa=on httpd_manage_ipa=on<br>Cannot set persistent booleans without managed policy.<br><br>root@ipaserver:/tmp/freeipa-4.3.1# /usr/sbin/getsebool httpd_run_ipa<br>Error getting active value for httpd_run_ipa<br><br>root@ipaserver:/tmp/freeipa-4.3.1# /usr/sbin/getsebool httpd_can_network_connect<br>httpd_can_network_connect --> off<br><br>root@ipaserver:/tmp/freeipa-4.3.1# /usr/sbin/getsebool httpd_manage_ipa<br>httpd_manage_ipa --> off<br><br>I want the result is not to appear error in the configuration process information.<br><br><br><div><sign signid="0"><div style="color:#909090;font-family:Arial Narrow;font-size:12px"><br><br><br><br>------------------</div><div style="font-size:14px;font-family:Verdana;color:#000;">祝：<br> 工作顺利！生活愉快！<br><span style="text-decoration: underline;"></span>--------------------------<br>长沙研发中心郑磊 <br>电话：18684703229<br>邮箱：zhenglei@kylinos.cn<br>公司：天津麒麟信息技术有限公司<br>地址：湖南长沙市开福区三一大道工美大厦十四楼<br> </div></sign></div><div> </div><div><includetail><div> </div><div> </div><div style="font:Verdana normal 14px;color:#000;"><div style="FONT-SIZE: 12px;FONT-FAMILY: Arial Narrow;padding:2px 0 2px 0;">------------------ Original ------------------</div><div style="FONT-SIZE: 12px;background:#efefef;padding:8px;"><div id="menu_sender"><b>From: </b> "Umarzuki Mochlis"<umarzuki@gmail.com>;</div><div><b>Date: </b> Tue, Nov 8, 2016 04:42 PM</div><div><b>To: </b> "郑磊"<zhenglei@kylinos.cn>; <wbr></div><div><b>Cc: </b> "freeipa-users"<freeipa-users@redhat.com>; <wbr></div><div><b>Subject: </b> Re: [Freeipa-users] Configuring httpd error when selinux is permissive</div></div><div> </div>2016-11-08 16:33 GMT+08:00 郑磊 <zhenglei@kylinos.cn>:<br>> Hello everyone,<br>> I have been setting up freeipa(its version is 4.3.1) on Ubuntu. Selinux is<br>> enable, and its mode is permissive. I met a problem at configuring the httpd<br>> process, but the process won't be interrupted. The configuration information<br>> is as follows:<br>> Configuring the web interface (httpd). Estimated time: 1 minute<br>> [1/20]: setting mod_nss port to 443<br>> [2/20]: setting mod_nss cipher suite<br>> [3/20]: setting mod_nss protocol list to TLSv1.0 - TLSv1.2<br>> [4/20]: setting mod_nss password file<br>> [5/20]: enabling mod_nss renegotiate<br>> [6/20]: adding URL rewriting rules<br>> [7/20]: configuring httpd<br>> [8/20]: configure certmonger for renewals<br>> [9/20]: setting up httpd keytab<br>> [10/20]: setting up ssl<br>> [11/20]: importing CA certificates from LDAP<br>> [12/20]: publish CA cert<br>> [13/20]: clean up any existing httpd ccache<br>> [14/20]: configuring SELinux for httpd<br>> ipa.ipaplatform.redhat.tasks: ERROR Cannot get SELinux boolean<br>> 'httpd_run_ipa': Command '/usr/sbin/getsebool httpd_run_ipa' returned<br>> non-zero exit status 255<br>> WARNING: Could not set SELinux booleans: httpd_can_network_connect=on<br>> httpd_run_ipa=on httpd_manage_ipa=on<br>><br>> The web interface may not function correctly until<br>> the booleans are successfully changed with the command:<br>> /usr/sbin/setsebool -P httpd_can_network_connect=on httpd_run_ipa=on<br>> httpd_manage_ipa=on<br>> Try updating the policycoreutils and selinux-policy packages.<br>> [15/20]: create KDC proxy user<br>> [16/20]: create KDC proxy config<br>> [17/20]: enable KDC proxy<br>> [18/20]: restarting httpd<br>> [19/20]: configuring httpd to start on boot<br>> [20/20]: enabling oddjobd<br>> Done configuring the web interface (httpd).<br>> Is there anyone can help me?<br>><br>> Thanks!<br><br>> --<br>> Manage your subscription for the Freeipa-users mailing list:<br>> https://www.redhat.com/mailman/listinfo/freeipa-users<br>> Go to http://freeipa.org for more info on the project<br><br><br>Hi,<br><br>Have you tried the suggested setsebool command?</div></includetail></div>