Cannot lock database
Nate Johnson
natejohn at iu.edu
Wed Sep 19 10:07:11 EDT 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Nalin Dahyabhai wrote:
> On Mon, Sep 17, 2007 at 11:46:36AM -0400, Nate Johnson wrote:
> Shot in the dark: is it RHEL 5.0 with SELinux in enforcing mode?
>
> If it is, try running "restorecon -R -v /var/kerberos/krb5kdc". That'll
> set the labels on the database files to values which the policy allows
> kadmind to manipulate.
Nalin, thanks for the note. Its actually hardened-gentoo:
# uname -a
Linux <kdc> 2.4.32-hardened-r6 #1 SMP Mon Oct 30 22:02:46 UTC 2006 i686
Intel(R) Xeon(TM) CPU 2.80GHz GenuineIntel GNU/Linux
Thanks,
Nate
- --
* Nate Johnson, Lead Security Engineer, GCIH
* University Information Security Office, Indiana University
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)
iD8DBQFG8S0PGQUVGJudcw4RAvuJAJ47loYHEfZMsRzbAG12CYkMHx7fVgCeIqD2
E0HHDv/6eI5MhTtOVXE/ArQ=
=WqBk
-----END PGP SIGNATURE-----
More information about the Kerberos
mailing list