tyler.durden/icingaweb2
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2.git synced 2025-07-30 01:04:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3287 from Icinga/bugfix/add-note-about-optional-selinux-booleans-3236

Browse Source 
Add note about known optional SELinux booleans to the documentation
This commit is contained in:
lippserd 2018-01-18 16:41:45 +01:00 committed by GitHub
commit 7dbb88faa8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
doc/05-Authentication.md
View File

@ -93,6 +93,9 @@ user\_class | **Optional.** LDAP user class. Defaults to `inetOrgPe
user\_name\_attribute | **Optional.** LDAP attribute which contains the username. Defaults to `uid`. user\_name\_attribute | **Optional.** LDAP attribute which contains the username. Defaults to `uid`.
filter | **Optional.** LDAP search filter. Requires `user_class` and `user_name_attribute`. filter | **Optional.** LDAP search filter. Requires `user_class` and `user_name_attribute`.
> **Note for SELinux**
>
> If you run into problems connecting with LDAP and have SELinux enabled, take a look [here](90-SELinux.md#selinux-optional-booleans).
Example: Example:

9
doc/90-SELinux.md
View File

@ -96,6 +96,15 @@ Having this boolean enabled allows httpd to write to the configuration labeled `
default. If not needed, you can disable it for more security. But this will disable all web based configuration of default. If not needed, you can disable it for more security. But this will disable all web based configuration of
Icinga Web 2. Icinga Web 2.
### Optional Booleans <a id="selinux-optional-booleans"></a>
The Icinga Web 2 policy package does not enable booleans not required by default. In order to allow these things,
you'll need to enable them manually. (i.e. with the tool `setsebool`)
**Ldap**
If you want to allow httpd to connect to the ldap port, you must turn on the `httpd_can_connect_ldap` boolean.
Disabled by default.
## Bugreports <a id="selinux-bugreports"></a> ## Bugreports <a id="selinux-bugreports"></a>
If you experience any problems while running SELinux in enforcing mode try to reproduce it in permissive mode. If the If you experience any problems while running SELinux in enforcing mode try to reproduce it in permissive mode. If the