[Bug 508190] [NEW] slapo-nssov not able to write socket file

[ben thielsen]

Public bug reported:

the nss overlay attempts to write it's socket file to
/var/run/nslcd/socket, but is prevented from doing so by apparmor:

type=1503 audit(1263524239.632:23): operation="mknod" pid=17179 parent=1
profile="/usr/sbin/slapd" requested_mask="w::" denied_mask="w::"
fsuid=107 ouid=107 name="/var/run/nslcd/socket"

adjusting /etc/apparmor/usr.sbin.slapd to accommodate this resolves the
issue:

  # pid files and sockets
  /var/run/slapd/* w,
  /var/run/nslcd/* w,

additionally, i don't believe that the slapd package created the
/var/run/nslcd/ directory:

drwxr-xr-x 2 openldap openldap 80 2010-01-15 18:28 /var/run/nslcd/

** Affects: openldap (Ubuntu)
     Importance: Undecided
         Status: New

-- 
slapo-nssov not able to write socket file
https://bugs.launchpad.net/bugs/508190
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.