freeipa

#7725 ipa-restore set wrong file permissions and ownership for /var/log/dirsrv/slapd- directory
Closed: fixed by rcritten. Opened by abbra.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1636765

Description of problem:
When attempting a restore, the permission are set to 755 and ownership
root:root for /var/log/dirsrv/slapd-<instance> which causes dirsrv not being
able to write to the access log
Version-Release number of selected component (if applicable):
How reproducible:
always
Steps to Reproduce:
1. ipa-restore /tmp/ipa-full-2018-10-02-11-53-58
2. grep log_flush_buffer /var/log/dirsrv/dirsrv/slapd-<instance>/errors
[07/Oct/2018:15:12:14.655887136 +0200] - ERR - log_flush_buffer - Unable to
open access file:/var/log/dirsrv/slapd-<instance>/access
Actual results:
[root@ipa1 dirsrv]# ll
total 4
drwxr-xr-x. 2 root root 4096 Oct  7 15:11 slapd-<instance>
Expected results:
[root@ipa1 dirsrv]# ll
total 4
drwxrwx---. 2 dirsrv dirsrv 4096 Oct  7 15:20 slapd-<instance>
Additional info:
Can be easily recovered manually by:
chmod 770 slapd-<instance>
chown dirsrv:dirsrv slapd-<instance>
SELinux context is correct

Metadata Update from @abbra:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1636765

Metadata Update from @rcritten:
- Issue assigned to rcritten

master:

  • 8da0e2e9774ead01d5c0fa53b1498f15b1818b79 ipa-restore: Restore ownership and perms on 389-ds log directory

ipa-4-8:

  • 966e0b8cee0ca4f9ce9ecf34ca49e58e14a632c9 ipa-restore: Restore ownership and perms on 389-ds log directory

ipa-4-7:

  • 05b173c1a7fb0b18b371771bafe01c0083547c79 ipa-restore: Restore ownership and perms on 389-ds log directory

ipa-4-6:

  • 8cd2052c3cb6d8a2569903593762d64669303ff6 ipa-restore: Restore ownership and perms on 389-ds log directory

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 7aec6f10374129d75cd99a4012980516ca535551 Check file ownership and permission for dirsrv log instance

ipa-4-8:

  • 940e2ef900d766086a793cfd6b8906e425badac0 Check file ownership and permission for dirsrv log instance

ipa-4-7:

  • 140111cd53803194a6c41a576cab9b3c282ed54f Check file ownership and permission for dirsrv log instance

ipa-4-6:

  • de0afeaf5e07028af8ec7247ce37efc789add2ae Check file ownership and permission for dirsrv log instance
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.