Displaying 2 results from an estimated 2 matches for "oddjob_mkhomedir_exec_t".
2015 Dec 19
1
LDAP create home directories
...this is what I found:
type=AVC msg=audit(1450562436.438:2148162): avc: denied { entrypoint }
for pid=17881 comm="sshd" path="/usr/sbin/mkhomedir_helper" dev="vda1"
ino=1048040 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=system_u:object_r:oddjob_mkhomedir_exec_t:s0 tclass=file
Was caused by:
Missing type enforcement (TE) allow rule.
You can use audit2allow to generate a loadable module to
allow this access.
So I just created the selinux module file and installed it:
[root at ops2:~] #grep ssh /var/log/audit/audi...
2015 Dec 19
2
LDAP create home directories
>
> You may also need to restart sssd or nslcd, depending upon which one is
> running the backed ldap connection service on the clients.
Hmm.. I got a different result after restarting nclcd. Instead of logging
me in and just complaining that it couldn't create the home directory, it
still complains about not creating the home directory, but now it doesn't
let me in:
#ssh