Skip to main content
avillanueva
23-Emerald I
23-Emerald I
June 27, 2025
Solved

Publish job fails with "Problem copying all files via ftp java.net.BindException: Permission denied"

  • June 27, 2025
  • 1 reply
  • 358 views

Documenting this error since I did not see any posts or articles related to it and my memory stinks so I will forget about it in a month. Testing publishing in a new instance, RHEL 9.2 running SELinux so yeah, anything strange, always check your audit logs.  Here is the error I saw:

Jun 26, 2025, 4:15:36 PM:Unable to submit job to worker
Jun 26, 2025, 4:15:37 PM:Problem copying all files via ftp java.net.BindException: Permission denied
Jun 26, 2025, 4:15:37 PM:Drawing Processing Returned: $ERROR$ Problem copying all files via ftp java.net.BindException: Permission denied
Jun 26, 2025, 4:15:37 PM:Attempting to delete temporary workspace publish5061078035387182999tmp.
Jun 26, 2025, 4:15:37 PM:Done deleting temporary workspace publish5061078035387182999tmp.
Jun 26, 2025, 4:15:37 PM:CadAgent Returned: $ERROR$ Problem copying all files via ftp java.net.BindException: Permission denied

Worker starts up fine, connects and I even see a folder get created in the transfer folder on my CAD worker machine. 

Best answer by avillanueva

And here is the solution. Check your /var/log/audit/audit.log or run "audit2allow -a -w" to look for related errors. I saw this which repeated each time I attempted to publish a job so I know its related:

node=<hostname> type=AVC msg=audit(1751033333.699:682993): avc: denied { name_connect } for pid=3715236 comm="Thread-189" dest=56750 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=tcp_socket permissive=0
 Was caused by:
 The boolean nis_enabled was set incorrectly.
 Description:
 Allow nis to enabled

 Allow access by executing:
 # setsebool -P nis_enabled 1

Running as suggested "setsebool -P nis_enabled 1" and voilà, no error message and publishing succeeds. 

1 reply

avillanueva
23-Emerald I
avillanueva23-Emerald IAuthorAnswer
23-Emerald I
June 27, 2025

And here is the solution. Check your /var/log/audit/audit.log or run "audit2allow -a -w" to look for related errors. I saw this which repeated each time I attempted to publish a job so I know its related:

node=<hostname> type=AVC msg=audit(1751033333.699:682993): avc: denied { name_connect } for pid=3715236 comm="Thread-189" dest=56750 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=tcp_socket permissive=0
 Was caused by:
 The boolean nis_enabled was set incorrectly.
 Description:
 Allow nis to enabled

 Allow access by executing:
 # setsebool -P nis_enabled 1

Running as suggested "setsebool -P nis_enabled 1" and voilà, no error message and publishing succeeds.