kerberos and selinux

Elia Pinto gitter.spiros at
Thu May 23 14:59:58 EDT 2013

It is a selinux question. So the selinux or the fedora selinux mailing
is a better place
to ask this questions.


2013/5/23, Chris Hecker <checker at>:
> I run with SELinux enabled, and krb5kdc and kadmin both want read access
> to /etc/pki/tls on startup.  I'm using ldaps as the protocol for talking
> to slapd, is this why?  This is on Centos 5, which I know is a bit old.
> My KDC and kadmin work fine without allowing this access, and there's
> nothing in krb5kdc.log or kadmind.log, just the AVC's in audit.log.
> Should I enable these guys to read cert_t files, or should I ignore
> them?  If the latter, is there a configuration setting for making them
> stop trying the directory?
> Thanks,
> Chris
> ________________________________________________
> Kerberos mailing list           Kerberos at

Inviato dal mio dispositivo mobile

More information about the Kerberos mailing list