Cannot lock database

Nate Johnson natejohn at iu.edu
Wed Sep 19 10:07:11 EDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nalin Dahyabhai wrote:
> On Mon, Sep 17, 2007 at 11:46:36AM -0400, Nate Johnson wrote:

> Shot in the dark: is it RHEL 5.0 with SELinux in enforcing mode?
> 
> If it is, try running "restorecon -R -v /var/kerberos/krb5kdc".  That'll
> set the labels on the database files to values which the policy allows
> kadmind to manipulate.

Nalin, thanks for the note. Its actually hardened-gentoo:

# uname -a
Linux <kdc> 2.4.32-hardened-r6 #1 SMP Mon Oct 30 22:02:46 UTC 2006 i686
Intel(R) Xeon(TM) CPU 2.80GHz GenuineIntel GNU/Linux

Thanks,
Nate

- --
* Nate Johnson, Lead Security Engineer, GCIH
* University Information Security Office, Indiana University
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD8DBQFG8S0PGQUVGJudcw4RAvuJAJ47loYHEfZMsRzbAG12CYkMHx7fVgCeIqD2
E0HHDv/6eI5MhTtOVXE/ArQ=
=WqBk
-----END PGP SIGNATURE-----



More information about the Kerberos mailing list