Dear All,
Who has an SL5 gLite3.2 site-bdii please?
If you do what's in your hosts.allow/deny?
Does slapd need ALL or something like that?
(Our LCG subnet not firewalled above 1024 if that's relevant)
I already found that selinux prevents SL5 bdii starting but got round it.
But I can't connect to 2170 on our SL5 test-site-bdii from outside if
tcpwrappers is active with a hosts.allow like an SL4 lcg-CE that allows
slapd: 127.0.0.1
From inside, testbdii info looks healthy as tcpwrappers allows our site.
On our old SL4 site-bdii (used to also be lcg-CE) netstat -ntap shows
tcp 0 0 0.0.0.0:2170 0.0.0.0:* LISTEN 20137/bdii-fwd [acc
On test SL5 site-bdii
tcp 0 0 137.222.171.55:2170 0.0.0.0:* LISTEN 3351/slapd
Is that what other SL5 site-bdii look like?
SL5 bdii seem quite different & don't log anything much by default.
|