freeipa

#7448 [F28] configuring SELinux for httpd prints warnings
Closed: worksforme Opened by cheimes.

Closed: worksforme
Reopen Issue

Installation on F28 issues a warning:

  [16/21]: configuring SELinux for httpd
WARNING: Could not set SELinux booleans: httpd_can_network_connect=on httpd_manage_ipa=on httpd_run_ipa=on httpd_dbus_sssd=on
The web interface may not function correctly until
the booleans are successfully changed with the command:
    /usr/sbin/setsebool -P httpd_can_network_connect=on httpd_manage_ipa=on httpd_run_ipa=on httpd_dbus_sssd=on
Try updating the policycoreutils and selinux-policy packages.

Version

$ rpm -qa freeipa-server selinux-policy
freeipa-server-4.6.90.dev201803141340+git2c05e42af-0.fc28.x86_64
selinux-policy-3.14.1-13.fc28.noarch

I'm not sure this is an IPA issue. On my server:

# /usr/sbin/setsebool -P httpd_can_network_connect=on httpd_manage_ipa=on httpd_run_ipa=on httpd_dbus_sssd=on
libsepol.context_from_record: type conntrackd_var_run_t is not defined
libsepol.context_from_record: could not create context structure
libsepol.context_from_string: could not create context structure
libsepol.sepol_context_to_sid: could not convert system_u:object_r:conntrackd_var_run_t:s0 to sid
invalid context system_u:object_r:conntrackd_var_run_t:s0
# echo $?
255

Me, too! I have opened https://bugzilla.redhat.com/show_bug.cgi?id=1556787

According to my tests, setsebool is still successful. Since the installer is working and it's an external bug, I'm closing the issue again.

Metadata Update from @cheimes:
- Issue close_status updated to: worksforme
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Low
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.