Question

我正在按照以下教程设置ldap服务器。

但是当启动slapd.service时，我遇到了错误

    Job for slapd.service failed because the control process exited with error code. See "systemctl status slapd.service" and "journalctl -xe" for details.

Below is the `journalctl -xe`logs, 

Jul 09 16:34:14 localhost.localdomain slapd[12451]: slapd stopped.
    Jul 09 16:34:14 localhost.localdomain slapd[12451]: connections_destroy: nothing to destroy.
    Jul 09 16:34:14 localhost.localdomain dbus[775]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper)
    Jul 09 16:34:14 localhost.localdomain systemd[1]: slapd.service: control process exited, code=exited status=1
    Jul 09 16:34:14 localhost.localdomain systemd[1]: Failed to start OpenLDAP Server Daemon.
    -- Subject: Unit slapd.service has failed
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    -- 
    -- Unit slapd.service has failed.
    -- 
    -- The result is failed.
    Jul 09 16:34:14 localhost.localdomain systemd[1]: Unit slapd.service entered failed state.
    Jul 09 16:34:14 localhost.localdomain systemd[1]: slapd.service failed.
    Jul 09 16:34:14 localhost.localdomain polkitd[752]: Unregistered Authentication Agent for unix-process:12431:55492 (system bus name :1.119, object pat
    Jul 09 16:34:14 localhost.localdomain dbus[775]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd'
    Jul 09 16:34:15 localhost.localdomain setroubleshoot[12455]: SELinux is preventing /usr/sbin/slapd from read access on the file unix. For complete SEL
    Jul 09 16:34:15 localhost.localdomain python[12455]: SELinux is preventing /usr/sbin/slapd from read access on the file unix.

                                                         *****  Plugin catchall (100. confidence) suggests   **************************

                                                         If you believe that slapd should be allowed read access on the unix file by default.
                                                         Then you should report this as a bug.
                                                         You can generate a local policy module to allow this access.
                                                         Do
                                                         allow this access for now by executing:
                                                         # ausearch -c 'slapd' --raw | audit2allow -M my-slapd
                                                         # semodule -i my-slapd.pp

在许可模式下使用SELinux。

请帮助修复它。

slapd.service的作业失败

0 个答案: