diff options
| author | Fabiano Fidêncio <fidencio@redhat.com> | 2017-03-13 17:35:03 +0100 |
|---|---|---|
| committer | Lukas Slebodnik <lslebodn@redhat.com> | 2017-03-15 16:01:41 +0100 |
| commit | e19327b3b06e723e5162f0c91cb77ba254bb3dc7 (patch) | |
| tree | d500a96c9f54806560d4b29c01d292595f9e3730 | |
| parent | b7430c4f4b98efe08d9d13d202fbb76229628b30 (diff) | |
| download | sssd-e19327b3b06e723e5162f0c91cb77ba254bb3dc7.tar.gz sssd-e19327b3b06e723e5162f0c91cb77ba254bb3dc7.tar.xz sssd-e19327b3b06e723e5162f0c91cb77ba254bb3dc7.zip | |
NSS: Ensure the NSS socket is started before any other services' sockets
Although I didn't have any problem with this before I'd like to ensure
that the NSS socket is always up _before_ any other (SSSD) services'
sockets as they may trigger initgroups calls as some of them have
SocketUser and SocketGroup set to the "sssd" user.
Related:
https://pagure.io/SSSD/sssd/issue/3322
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
| -rw-r--r-- | src/sysv/systemd/sssd-nss.socket.in | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/sysv/systemd/sssd-nss.socket.in b/src/sysv/systemd/sssd-nss.socket.in index 83c12857b..e5d6eda1d 100644 --- a/src/sysv/systemd/sssd-nss.socket.in +++ b/src/sysv/systemd/sssd-nss.socket.in @@ -3,6 +3,7 @@ Description=SSSD NSS Service responder socket Documentation=man:sssd.conf(5) After=sssd.service BindsTo=sssd.service +Before=sssd-autofs.socket sssd-pac.socket sssd-pam.socket sssd-ssh.socket sssd-sudo.socket DefaultDependencies=no Conflicts=shutdown.target |