kaz

Disabled selinux but the problem persist. OS is CentOS Stream9 in AWS. GestioIP v3.5 (patch version 7 (0)) Able to login mysql locally with gestioip user, no issue. mysql --host=127.0.01 -u gestioip -p gestioip tcpdump does not show obvious blocks. Noticed that CPU usage gets high around 90% when sync DNS. Manage > "max number of parallel discovery processes" to lower number (default 254) then problem ceased. I could not imagine the root cause from the error message on web UI.

Error when sync with DNS Content-type: text/html ERROR Can not connect to database Can't connect to server on '127.0.0.1' (115) Any idea?

Hello Marc, GestioIP v3.5 patch 7 on CentOS Stream9 had problem ping (by clicking coloured circle at an IP address at Host list view). tcpdump does not show ping packs transmit . Disabling selinux works the ping. audit2allow did not help and still showing ping deny audit logs. ausearch -m AVC --start 11:26:00 --end 11:59:00 | audit2allow -a -M ping_rule semodule -i ping_rule.pp then chcon -R -t httpd_sys_script_exec_t /var/www/html/gestioip grep ping /var/log/audit/audit.log | tail type=AVC msg=audit(1700479699.555:1600):...

This is sorted by temporarily disabled dontaudit rules for selinux.

SELinux security context of the files are: ls -alZ /etc/httpd/conf/httpd.conf -rw-r--r--. 1 root root system_u:object_r:httpd_config_t:s0 12005 Jul 20 09:41 /etc/httpd/conf/httpd.conf ls -alZ /var/www/html/gestioip/res/ip_insert_user_form.cgi -rwxr-x---. 1 apache apache unconfined_u:object_r:httpd_sys_script_exec_t:s0 4889 Sep 20 23:11 /var/www/html/gestioip/res/ip_insert_user_form.cgi

Hi Marc, Can you pleae help investigating issues on v3.5 patch 7 on Centos Stream 9? Cannot add LDAP user with below error on GUI " ERROR Apache config test returned: httpd: Could not open configuration file /etc/httpd/conf/httpd.conf: Permission denied " User management is set to "yes" Problem does not occur when selinux disabled "setenforce 0". I applied selinux changes based on findings in audit.log ausearch -m AVC --start 10/06/2023 12:40:00 --end 10/06/2023 13:30:00 | audit2allow -a -M httpd_rule...

ok thanks Marc.

Hi Marc, Is there way to auto log off after certan period of time of no GUI activities ? Or is this something to do with Apache and can not implement GestioIP? Thanks, Kaz