[Freeipa-devel] ipa-server-install error

[Martin Kosek]

On 05/30/2014 06:14 AM, Dmitri Pal wrote:
> On 05/29/2014 01:44 AM, James wrote:
>> /usr/bin/runcon: invalid context: unconfined_u:system_r:pki_ca_script_t:s0:
>> Invalid argument"
> Looks like and AVC that lead to restart failure of the PKI instance that in
> turn led to failure to configure CA.

I asked Ade Lee and got this response:

On 05/29/2014 04:44 PM, Ade Lee wrote:
> The problem is here:
>
> /usr/bin/runcon: invalid context:
> unconfined_u:system_r:pki_ca_script_t:s0: Invalid argument"
>
> We've seen this before.  Sometimes pki-selinux fails to load its policy
> for some reason.  The best thing to do is to force re-install
> pki-selinux (and check for any errors in the /var/log/messages file).
>
> Ade