Erinn Looney-Triggs wrote:
On 11/13/12 11:05, Daniel J Walsh wrote:
selinuxdefcon erinn system_u:system_r:xdm_t:s0-s0:c0.c1023
unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
I am assuming you meant run this:
selinuxdefcon erinn system_u:system_r:xdm_t:s0-s0:c0.c1023
Which in turn resulted in this:
unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
In F-18 you have a version of sssd that actually CAN do selinux user
mapping.
Run ipa config-show and I'll bet the default SELinux user is guest_u.
Try this as an admin user:
$ ipa config-mod --ipaselinuxusermapdefault=unconfined_u:s0-s0:c0.c1023
Then try the login again.
rob
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux