Server error when trying to log in ClusterControl

Follow

Raf van de Vreugde

• November 01, 2023 16:04

I have installed ClusterControl and configured a new admin user.

When I want to logon with this new user (or the default admin), I got a "Server Error"!

Can anybody help, please?

0

• 

  Florin Samareanu

  • November 01, 2023 16:10

  Some logs might be required. Does the error come after disabling selinux using setenforce 0 ?

  0

  Comment actions Permalink
• 

  Raf van de Vreugde

  • November 01, 2023 16:21

  Yes it does.
  Which logs are needed?

   

  0

  Comment actions Permalink
• 

  Raf van de Vreugde

  • November 01, 2023 16:28
  • Edited

  Got it working after this:

  ausearch -m avc -ts today
  cat /var/log/audit/audit.log | audit2why
  ausearch --raw | grep httpd | audit2allow -M cluco_httpd
  semodule -i cluco_httpd
  reboot

  Command result of ausearch -m avc -ts today

  type=AVC msg=audit(1698852940.086:27): avc:  denied  { name_bind } for  pid=788 comm="httpd" src=19501 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=0
  
      Was caused by:
          Unknown - would be allowed by active policy
          Possible mismatch between this policy and the one under which the audit message was generated.
  
          Possible mismatch between current in-memory boolean settings vs. permanent ones.

  And for cat /var/log/audit/audit.log | audit2why

  type=AVC msg=audit(1698854556.445:124): avc:  denied  { name_connect } for  pid=848 comm="httpd" dest=9501 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=0
  
      Was caused by:
      One of the following booleans was set incorrectly.
      Description:
      Allow httpd to can network connect
  
      Allow access by executing:
      # setsebool -P httpd_can_network_connect 1
      Description:
      Allow nis to enabled
  
      Allow access by executing:
      # setsebool -P nis_enabled 1

   

  0

  Comment actions Permalink

Please sign in to leave a comment.