Publish job fails with "Problem copying all files via ftp java.net.BindException: Permission denied"

[avillanueva]

Documenting this error since I did not see any posts or articles related to it and my memory stinks so I will forget about it in a month. Testing publishing in a new instance, RHEL 9.2 running SELinux so yeah, anything strange, always check your audit logs.  Here is the error I saw:

Jun 26, 2025, 4:15:36 PM:Unable to submit job to worker
Jun 26, 2025, 4:15:37 PM:Problem copying all files via ftp java.net.BindException: Permission denied
Jun 26, 2025, 4:15:37 PM:Drawing Processing Returned: $ERROR$ Problem copying all files via ftp java.net.BindException: Permission denied
Jun 26, 2025, 4:15:37 PM:Attempting to delete temporary workspace publish5061078035387182999tmp.
Jun 26, 2025, 4:15:37 PM:Done deleting temporary workspace publish5061078035387182999tmp.
Jun 26, 2025, 4:15:37 PM:CadAgent Returned: $ERROR$ Problem copying all files via ftp java.net.BindException: Permission denied

Worker starts up fine, connects and I even see a folder get created in the transfer folder on my CAD worker machine. 

[avillanueva · Accepted solution]

And here is the solution. Check your /var/log/audit/audit.log or run "audit2allow -a -w" to look for related errors. I saw this which repeated each time I attempted to publish a job so I know its related:

node=<hostname> type=AVC msg=audit(1751033333.699:682993): avc:  denied  { name_connect } for  pid=3715236 comm="Thread-189" dest=56750 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=tcp_socket permissive=0
        Was caused by:
        The boolean nis_enabled was set incorrectly.
        Description:
        Allow nis to enabled

        Allow access by executing:
        # setsebool -P nis_enabled 1

Running as suggested "setsebool -P nis_enabled 1" and voilà, no error message and publishing succeeds.