Hi,
I am running 389-ds on CentOs 6.7. I am trying to move 389-ds off the disk that contains my root to a second disk that has space for the directory to grow. Can someone please advise on the correct way to move files and maintain selinux contexts. I moved the files using the method below, but logs cannot be written to - please see error message at the bottom of this email.
Setup
CentOs 6.7
selinux= enforcing
Second disk /mnt/ds389/data/
/mnt/389ds/log/
i used cp -rcp to copy and preserve SELINUX contexts and user rights
1. Stop dirsrv
2. cp -rcp /var/lib/dirsrv/ /mnt/ds389/data/
3. Checked selinux context using ls -Z dirsrv
output: drwxrwx---. nobody nobody unconfined_u:object_r:dirsrv_var_lib_t:s0 slapd-eu-vc-pmldap01
4. renamed /var/lib/dirsrv (keep original files under a different name)
5. Create symbolic link # ln -s /mnt/389ds/data/ dirsrv
Logs
6. cp -rcp /var/log/dirsrv /mnt/389ds/log/
7. Checked selinux context for /mnt/389ds/log
drwx------. nobody nobody unconfined_u:object_r:dirsrv_var_log_t:s0 admin-serv
drwxr-xr-x. nobody nobody unconfined_u:object_r:dirsrv_var_log_t:s0 slapd-eu-vc-pmldap018. Renamed /var/log/dirsrv t
9. Create symbolic link in /var/log ln -s /mtn/389ds/log/ dirsrv
10. Reboot server
11 $ sudo service dirsrv start
Error:
etc/dirsrv/slapd-xxxxxxxxx/dse.ldif: nsslapd-errorlog: Cannot open errorlog file "/var/log/dirsrv/slapd-xxxxxxxxxx/errors", errors cannot be logged. Exiting.... [15/Nov/2015:15:00:12 +0000] - WARNING: can't open file /var/log/dirsrv/slapd-xxxxxxxx/access. errno 13 (Permission denied)[15/Nov/2015:15:00:12 +0000] dse_read_one_file - The entry cn=config in file /etc/dirsrv/slapd-xxxxx/dse.ldif (lineno: 10) is invalid, error code 53 (Server is unwilling to perform) - Cannot open accesslog directory "/var/log/dirsrv/slapd-xxxxxxx/access", client accesses will not be logged.[15/Nov/2015:15:00:12 +0000] dse - Could not load config file [dse.ldif][15/Nov/2015:15:00:12 +0000] dse - Please edit the file to correct the reported problems and then restart the server.
Kind regards
-- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users
