freeipa

#5520 named-pkcs11 failed to start due wrong file permissions
Closed: Fixed Opened by mbasti.

Closed: Fixed
Reopen Issue

With umask set to 077 named is unable to start due wrong permission on directory/files:

Workaround:

 chmod 770 /var/lib/ipa/dnssec
 chmod 644 /etc/ipa/dnssec/softhsm2.conf

File mods must be explicitly modified by os.chmod() to have effect over umask.

This may not be all affected files.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1289311 (Red Hat Enterprise Linux 7)

It should be

 chmod 644 /etc/ipa/dnssec/softhsm2.conf

master:

  • 5e2cd38ab998230aa81cd07196edfba2b62cb58d DNS: fix file permissions
  • 4272ba40ea909b1f783a6fada5b1eebb6efbdf93 Explicitly call chmod on newly created directories

Needs triage, if it should be backported to ipa 4.2

yes, it should be backported to 4.2.4

ipa-4-2:

  • d910de818e528d66d9e27ec3b9097dc41fd2de3f DNS: fix file permissions
  • 5c2dbcc997f0effe935e5a85cca3439d908249f8 Explicitly call chmod on newly created directories

Fix:

master:

  • 403652b5b9cc5e80869019067cbe1424b5c02bd1 Fix: replace mkdir with chmod

ipa-4-3:

  • f3a8ef0601b21fe4ddace08d8fd2b7a821efd658 Fix: replace mkdir with chmod

ipa-4-2:

  • 066ecf466403e4e321253238d28a235c7bcc0cd6 Fix: replace mkdir with chmod

Metadata Update from @mbasti:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.2.4
Metadata
None
None
None
Low
defect
DNS
1
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.