https://bugzilla.novell.com/show_bug.cgi?id=851131
https://bugzilla.novell.com/show_bug.cgi?id=851131#c16
Lars Heide changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |itsbo@fz-juelich.de
--- Comment #16 from Lars Heide 2014-09-11 16:16:15 UTC ---
I had to add this rule to apparmor to have winbind working:
/var/cache/krb5rcache/* rw,
2014-09-11T17:38:26.239161+02:00 hostname kernel: [11473.815728] type=1400
audit(1410449906.233:59): apparmor="DENIED" operation="mknod" parent=2766
profile="/usr/sbin/winbindd" name="/var/cache/krb5rcache/hostname-044_132125"
pid=2945 comm="winbindd" requested_mask="c" denied_mask="c" fsuid=132125
ouid=132125
This happened on an OpenSuSE 13.1
I also saw this:
2014-09-10T18:00:32.060219+02:00 hostname kernel: [ 650.879115] type=1400
audit(1410364832.053:42): apparmor="DENIED" operation="mknod" parent=5961
profile="/usr/sbin/winbindd" name="/etc/samba/passdb.tdb.tmp" pid=7637
comm="winbindd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
and added
/etc/samba/passdb.tdb.tmp rwk,
/etc/samba/secrets.tdb.tmp rwk,
as the original files are permitted, the tmp files should also be permitted.
This also cropped up:
2014-09-11T10:36:25.470899+02:00 hostname kernel: [ 864.731323] type=1400
audit(1410424585.466:41): apparmor="DENIED" operation="capable" parent=1941
profile="/usr/sbin/winbindd" pid=2135 comm="winbindd" pid=2135 comm="winbindd"
capability=1 capname="dac_override"
Didn't seem to impair functionality. Somebody can elaborate on this?
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.