-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nalin Dahyabhai wrote: > On Mon, Sep 17, 2007 at 11:46:36AM -0400, Nate Johnson wrote:
> Shot in the dark: is it RHEL 5.0 with SELinux in enforcing mode? > > If it is, try running "restorecon -R -v /var/kerberos/krb5kdc". That'll > set the labels on the database files to values which the policy allows > kadmind to manipulate. Nalin, thanks for the note. Its actually hardened-gentoo: # uname -a Linux <kdc> 2.4.32-hardened-r6 #1 SMP Mon Oct 30 22:02:46 UTC 2006 i686 Intel(R) Xeon(TM) CPU 2.80GHz GenuineIntel GNU/Linux Thanks, Nate - -- * Nate Johnson, Lead Security Engineer, GCIH * University Information Security Office, Indiana University -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.7 (GNU/Linux) iD8DBQFG8S0PGQUVGJudcw4RAvuJAJ47loYHEfZMsRzbAG12CYkMHx7fVgCeIqD2 E0HHDv/6eI5MhTtOVXE/ArQ= =WqBk -----END PGP SIGNATURE----- ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
