diff options
| author | Karl MacMillan <kmacmill@redhat.com> | 2007-10-24 10:10:29 -0400 |
|---|---|---|
| committer | Karl MacMillan <kmacmill@redhat.com> | 2007-10-24 10:10:29 -0400 |
| commit | 263fba1468a1425f22af149f577f442d5f7d4316 (patch) | |
| tree | 7eb3eb801178b192881cf51369e811aebd013313 /ipa-server | |
| parent | 2703be51c85fd8a64613c15b1aba565ca08c48b4 (diff) | |
| download | freeipa-263fba1468a1425f22af149f577f442d5f7d4316.tar.gz freeipa-263fba1468a1425f22af149f577f442d5f7d4316.tar.xz freeipa-263fba1468a1425f22af149f577f442d5f7d4316.zip | |
Handle selinux failure
Ignore errors if setsebool fails and print a warning.
Diffstat (limited to 'ipa-server')
| -rw-r--r-- | ipa-server/ipa-install/ipa-server-install | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/ipa-server/ipa-install/ipa-server-install b/ipa-server/ipa-install/ipa-server-install index e05340b33..8f111d213 100644 --- a/ipa-server/ipa-install/ipa-server-install +++ b/ipa-server/ipa-install/ipa-server-install @@ -554,7 +554,16 @@ def main(): if selinux: # Allow apache to connect to the turbogears web gui - run(["/usr/sbin/setsebool", "-P", "httpd_can_network_connect", "true"]) + # This can still fail even if selinux is enabled + try: + run(["/usr/sbin/setsebool", "-P", "httpd_can_network_connect", "true"]) + except: + print "WARNING: could not set selinux boolean httpd_can_network_connect to true." + print "The web interface may not function correctly until this boolean is" + print "successfully change with the command:" + print " /usr/sbin/setsebool -P httpd_can_network_connect true" + print "Try updating the policycoreutils and selinux-policy packages." + pass # Start the web gui run(["/sbin/service", "ipa-webgui", "start"]) |