Bug#759001: Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

[Michael Biebl]

On Sat, Aug 23, 2014 at 11:19:44AM -0700, Russ Allbery wrote:
> Sam Hartman <hartmans at debian.org> writes:
> 
> > Russ, thoughts on what is the right way to manage the dependency between
> > krb5-kdc-ldap and slapd in systemd?
> 
> Well, socket activation for slapd would probably make this problem go away
> completely, so I think that would be the ideal solution.

Nod

> Failing that, could krb5-kdc-ldap introduce a somewhat artificial service
> that exists solely to be Before krb5-kdc and After slapd, thus forcing the
> ordering constraint?  I think that would be the native systemd equivalent
> of an insserv override.

Two more suggestions:
a/ let krb5-kdc-ldap ship a service file (with the proper dependencies
and orderings) which conflicts with the krb5-kdc service. This will
remove krb5-kdc from the start sequence.

b/ make krb5-kdc-ship a drop-in snippet as
/lib/systemd/system/krb5-kcd.service.d/foo.conf which augments the
krb5-kcd.service with the necessary dependencies/orderings.


As far as insserv overrides go in systemd (#759001): Apparently there
are only two packages using that mechanism:
krb5-kdc-ldap and debian-edu-config (and the latter is very special in
any case).

So I'm not convinced spending time on teaching systemd about insserv
overrides with the limited ressources we have, is a good idea when we
can just as well write one (or two service files).

Therefore I'm inclined to tag #759001 as wontfix as far as myself goes.