Bug#759001: Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

[Michael Biebl]

Am 24.08.2014 19:44, schrieb Sam Hartman:
>>>>>> "Michael" == Michael Biebl <biebl at debian.org> writes:
> 
>     Michael> b/ make krb5-kdc-ship a drop-in snippet as
>     Michael> /lib/systemd/system/krb5-kcd.service.d/foo.conf which
>     Michael> augments the krb5-kcd.service with the necessary
>     Michael> dependencies/orderings.
> 
> 
> Hmm.
> How will this work if an administrator overrides
> /lib/systemd/system/krb5-kdc.service with
> /etc/systemd/system/krb5-kdc.service?
> 
> will /lib/systemd/system/krb5-kdc.service.d be looked at in this case?

I think so, yes. Haven't tested this though.
The override mechanism afaik only works on objects of the same name.

> If so, that seems to violate policy's requirements regarding
> configuration files, because a user might well want to override whatever
> we put in foo.conf and possibly override it with nothing.

Well, one could argue that the user also needs to override the drop-in
snippet via a file in /etc/systemd/system/krb5-kdc.service.d in this
case. This can be an empty file.

The extension mechanism via foo.service.d drop-ins is usually used for
local modifications. So yeah, maybe this is the wrong tool for this
particular case.

Michael





-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20140824/83faa947/attachment-0002.sig>