Non-writable log and cache dirs for serviceregistry

OpenConext-Attic / OpenConext-vm

:warning: Obsolete respository, archive only :zzz:

4 stars 9 forks source link

Non-writable log and cache dirs for serviceregistry #13

Closed baszoetekouw closed 10 years ago

baszoetekouw commented 10 years ago

After installing openconext using the latest vm-script (using minimal set, ie EB, SR, Mujina), SR show Unhandled Exceptions, having to do with unwritable dirs:

/opt/www/OpenConext-serviceregistry/vendor/janus-ssp/janus/app/cache/prod
/opt/www/OpenConext-serviceregistry/vendor/janus-ssp/janus/app/logs

chowning those dirs to use apache seems to fix it.

jmsnoeij commented 10 years ago

@lucasvanlierop is fixing this in issue https://github.com/janus-ssp/janus/issues/414

this it (at the moment) not an issue that we can fix from the OpenConext-VM context.

lucasvanlierop commented 10 years ago

Update: if the chosen solution in the above mentioned pull request will be approved then two writable dirs need to exist:

/tmp//janus/cache (Although the system will be able to create this)
/var/log/janus (Must be created and made readable since an apache is not allowed to do this.)

Als the user running the database migrations also needs access to those dirs.

jmsnoeij commented 10 years ago

fixed in 6453bd53d073a9c9914c1904108dbb7953bb5a3f A new seLinux policy is added to allow SR to write in /tmp/janus/cache and /var/log/janus