Bug#878625: systemd: NIS users login takes longtime.

[Elimar Riesebieter]

* Elimar Riesebieter <riesebie at lxtec.de> [2017-10-17 18:24 +0200]:

> * Michael Biebl <biebl at debian.org> [2017-10-17 16:38 +0200]:
> 
> > Am 15.10.2017 um 11:15 schrieb Elimar Riesebieter:
> > > * Elimar Riesebieter <riesebie at lxtec.de> [2017-10-15 10:55 +0200]:
> > > 
> > >> Package: systemd
> > >> Version: 235-2
> > >> Severity: normal
> > >>
> > >> Login as a NIS user journalctl tells:
> > >>
> > >> systemd-logind[666]: do_ypcall: clnt_call: RPC: Unable to send; errno = Operation not permitted
> > >> pam_systemd(login:session): Failed to create session: Connection timed out
> > >>
> > >> User is logged in after a while and there is no /run/user/UID
> > >>
> > >> Running 234-3 from testing runs just fine.
> > >>
> > >> Running a kernel with "CONFIG_CGROUP_BPF is not set" there are no
> > >> errors and the NIS user is logged in quite fast. But then systemd
> > >> tells:
> > >>
> > >> File /lib/systemd/system/systemd-udevd.service:32 configures an IP firewall (IPAddressDeny=any), but the local system does not support BPF/cgroup based firewalling.
> > > 
> > > Commenting out /lib/systemd/system/systemd-udevd.service:32 and
> > > after a restart doesn't help either.
> > 
> > Could you also comment that out in
> > /lib/systemd/system/systemd-logind.service and retry?
> 
> Commented "IPAddressDeny=any" in both systemd-udevd.service and
> systemd-logind.service. All runs fine now :-)

Commenting "IPAddressDeny=any" in  systemd-logind.service only runs
fine as well.

-- 
  From The Collaborative International Dictionary of English v.0.48 [gcide]:
  .
  arsehole \arse"hole`\ ([aum]rs"h[=o]l`), n.
         1. execretory opening at the end of the alimentary canal.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20171017/242ced9d/attachment-0002.sig>