Sorry for bothering you, I've forgotten to label this port with selinux in enforced mode... Regards, Vlad. On Thu, 2012-08-02 at 09:48 +0200, Elisseev V. wrote: > Hello, > > I have (IMO) very strange problem with starting second instance of > directory server with SSL enabled (without SSL this instance starts > perfectly fine). The error is > createprlistensockets - PR_Bind() on All Interfaces port 1636 failed: Netscape Portable Runtime error -5966 (Access Denied.) > > With strace I see following (successful bind to port 1389, but permission denied for SSL port 1636): > [pid 6698] bind(6, {sa_family=AF_INET6, sin6_port=htons(1389), inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 > [pid 6698] socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 7 > [pid 6698] fcntl(7, F_GETFL) = 0x2 (flags O_RDWR) > [pid 6698] fcntl(7, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > [pid 6698] setsockopt(7, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 > [pid 6698] bind(7, {sa_family=AF_INET6, sin6_port=htons(1636), inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 EACCES (Permission denied) > > I'm out of ideas and appreciate any thoughts. > > Regards, > Vlad. > > P.S. OS is CentOS 6.2. > > > -- > 389 users mailing list > 389-users@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/389-users -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users