Daniel J Walsh wrote:
Install selinux-policy-targeted-sources
cd /etc/selinux/targeted/src/policy make enableaudit; make load
Try the smbclient command
Grab the AVC messages
OK, I did this and it was pretty clear from the result that the problem was the labeling of /home. In fact, the problem was the lack of labeling. Because /home was still around from an original FC1 install on this system, it did not get labeled appropriately on install of FC4, and therefore smbclient didn't work with SELinux enabled. A quick
# touch /.autorelabel
and a reboot fixed the problem. FYI, the appropriate labels seem to be system_u:object_r:home_root_t for /home, user_u:object_r:user_home_dir_t for user directories in /home, and user_u:object_r:user_home_t for users' other files and directories.
Thanks to everyone for their help and patience with this problem.