From e19327b3b06e723e5162f0c91cb77ba254bb3dc7 Mon Sep 17 00:00:00 2001 From: Fabiano Fidêncio Date: Mon, 13 Mar 2017 17:35:03 +0100 Subject: NSS: Ensure the NSS socket is started before any other services' sockets MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Although I didn't have any problem with this before I'd like to ensure that the NSS socket is always up _before_ any other (SSSD) services' sockets as they may trigger initgroups calls as some of them have SocketUser and SocketGroup set to the "sssd" user. Related: https://pagure.io/SSSD/sssd/issue/3322 Signed-off-by: Fabiano Fidêncio Reviewed-by: Lukáš Slebodník --- src/sysv/systemd/sssd-nss.socket.in | 1 + 1 file changed, 1 insertion(+) diff --git a/src/sysv/systemd/sssd-nss.socket.in b/src/sysv/systemd/sssd-nss.socket.in index 83c12857b..e5d6eda1d 100644 --- a/src/sysv/systemd/sssd-nss.socket.in +++ b/src/sysv/systemd/sssd-nss.socket.in @@ -3,6 +3,7 @@ Description=SSSD NSS Service responder socket Documentation=man:sssd.conf(5) After=sssd.service BindsTo=sssd.service +Before=sssd-autofs.socket sssd-pac.socket sssd-pam.socket sssd-ssh.socket sssd-sudo.socket DefaultDependencies=no Conflicts=shutdown.target -- cgit