SELinux

To make LemonLDAP::NG work with SELinux, you may need to set up some options.

SELinux policy package

If you are using a RPM distribution and Apache as the web server, you need to install the lemonldap-ng-selinux package to configure SELinux context correctly

yum install lemonldap-ng-selinux

Note

On CentOS 8 and Fedora, this is done automatically

This package will not configure SELinux booleans, please read the next sections to see which booleans you need to enable manually

Disk cache (sessions an configuration)

You need to set the correct context on the cache directory

Deprecated since version 2.0.10: this is now done by the lemonldap-ng-selinux package

semanage fcontext --add -t httpd_cache_t -f a '/var/cache/lemonldap-ng(/.*)?'
restorecon -R /var/cache/lemonldap-ng/

LDAP

setsebool -P httpd_can_connect_ldap 1

Databases

setsebool -P httpd_can_network_connect_db 1

Memcache

setsebool -P httpd_can_network_memcache 1

Proxy HTTP

setsebool -P httpd_can_network_relay 1