SOLVED: Trying to solve a SocketError [Errno 13] Permission with PL/Python in PostgreSQL 9.3

From: Marcos Ortiz <mlortiz(at)uci(dot)cu>
To: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-general(at)postgresql(dot)org
Subject: SOLVED: Trying to solve a SocketError [Errno 13] Permission with PL/Python in PostgreSQL 9.3
Date: 2015-05-25 05:22:20
Message-ID: 5562B18C.4050700@uci.cu
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Regards, Adrian, Tom and all pgsql-general list.
Like Tom said, the problem was with SELinux and I found the policy which
caused all problems:
grep denied audit.log | audit2allow

#============= postgresql_t ==============

#!!!! This avc can be allowed using the boolean 'nis_enabled'
allow postgresql_t ephemeral_port_t:tcp_socket name_connect;

#!!!! This avc can be allowed using the boolean 'nis_enabled'
allow postgresql_t unreserved_port_t:tcp_socket name_connect;

I checked that boolean with:

# getsebool -a | grep nis_enabled
nis_enabled --> off

Then, I changed it to on, and everything works well with SELinux enabled
by default.
Thanks again for the time and patience.

On 24/05/15 19:43, Adrian Klaver wrote:
> On 05/24/2015 04:15 PM, Marcos Ortiz wrote:
>> Sorry for the late response.
>>
>
>>>
>>> Not sure if it applies but see here:
>>>
>>> http://neo4j.com/docs/stable/rest-api-security.html
>>> "When Neo4j is first installed you can authenticate with the default
>>> user neo4j and the default password neo4j. However, the default
>>> password must be changed (see the section called “User status and
>>> password changing”) before access to resources will be permitted. ..."
>> Yes, I changed the password.
>> It seems that the problem was with SELinux.
>> I disabled it for a moment to make a simple test y everything worked.
>> But, like Tom said, I don´t want SELinux disabled in my systems, so I
>> will find out the
>> security label who is blocking this in CentOS, and enable it again.
>> When I find it, I will send the solution to the list.
>
> Glad you found the cause and thanks for following up. Nice to be able
> to close the loop on a problem.

>
>> Best wishes and thanks again for your time.
>>>
>>>
>>
>> --
>> Marcos Ortiz <http://about.me/marcosortiz>, Sr. Product Manager (Data
>> Infrastructure) at UCI
>> @marcosluis2186 <http://twitter.com/marcosluis2186>
>>
>>
>
>

--
Marcos Ortiz <http://about.me/marcosortiz>, Sr. Product Manager (Data
Infrastructure) at UCI
@marcosluis2186 <http://twitter.com/marcosluis2186>

In response to

Browse pgsql-general by date

  From Date Subject
Next Message twoflower 2015-05-25 07:41:43 Re: Server tries to read a different config file than it is supposed to
Previous Message Adrian Klaver 2015-05-24 23:43:37 Re: Trying to solve a SocketError [Errno 13] Permission with PL/Python in PostgreSQL 9.3