SP packaging

Cantor, Scott cantor.2 at osu.edu
Sun Jan 31 18:13:07 UTC 2016


On 1/30/16, 10:25 AM, "Ferenc Wagner,,, on behalf of Ferenc Wágner" <wferi at niif.hu> wrote:


>
>Probably because this function is not present in shibd: the uid change
>is happening in the init script or in systemd, before shibd itself is
>started.

That's true, but the parameters to do it exist, they just aren't used right now anymore in the various init scripts. In fact, it may not actually be a bug, just user error not specifying the -u or -g parameters when using it.

>>I don't know if I know how to fix the startup thing under systemd, but
>> I can take a look, or you can tell me how. A new issue is fine.
>
>Well, there is ExecStartPre, which could serve as a workaround until
>shibd can change uid on its own (if that takes long).

shibd already can, but I was told pretty explicitly by people not to do it in things like systemd that already have a way to manage it.

>By the way, do you plan to add socket activation support?

No, it's very difficult for me to see how I could do it given the design and I don't see the benefit. The sockets are managed with an abstraction that's run deep inside the library, it's not anywhere near the "surface" of the daemon code.

-- Scott



More information about the Pkg-shibboleth-devel mailing list