[Cialug] CentOS httpd

[Barry Von Ahsen]

yes, there is a separate syntax for ports, but if you're not doing something funny, it should be fine (and you're not, funny would be port 8443 or something)

it looks like you copied the config from another server and from /root/ ?  I'm getting this from the admin_home_t part

if you do

restorecon -Rv /etc/httpd

it should be happier.  it might be -r, I don't have a cent box handy


-barry



> On Nov 8, 2016, at 12:01 PM, L. V. Lammert <lvl at omnitec.net> wrote:
> 
> On Tue, 8 Nov 2016, Kyle Hamilton wrote:
> 
>> Check if selinux is enabled with 'getenforce'. You can search for 'fail'
>> by using 'less /var/log/audit/auth.log' fressing 'G' to go the the end
>> of the file, pressing '?' to do a reverse search, typing fail, hitting
>> enter to finally search. Use n to go to next result, and N to go to
>> previous search result. Selinux is most likely your problem.
>> 
> Bingo - thanks!!
> 
> # ls -Z /etc/httpd/conf/httpd.conf
> -rw-r--r--. root root unconfined_u:object_r:admin_home_t:s0 /etc/httpd/conf/httpd.conf
> 
> Set to permissive for testing, .. but httpd cannot bind to the port:
> 
> ... could not bind to address 10.128.0.5:443
> 
> (Set to specific IP to troubleshoot, no change.)
> 
> Is there a different selinux permission for ports?
> 
>> Do not set selinux to permissive, just go over the small learning hump
>> 
> You must have been a good salesman in an earlier life <g>??
> 
> 	Thanks!!
> 
> 	Lee
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug