Symas OpenLDAP 2.5: SELinux configuration

With RHEL8 systems and above, an SELinux profile is provided for when targeted enforcement is in use.

Configuring for cn=config usage

By default, the installation package does not create a slapd.d directory for use, which means that it does not have the correct SELinux context set when it is created. To fix this:

• cd /opt/soldap/etc/openldap
• mkdir -p slapd.d
• restorecon -RvF /opt/soldap/etc/openldap/slapd.d

If this is not done, it will not be possible to make changes to the cn=config database on the fly.
 
Need help? Email: support@symas.com