Ben Morrice (24697b9f) at 06 Feb 11:50
Merge branch 'exe' into 'master'
Steve Traylen (8eb76535) at 06 Feb 11:50
Just noticed:
Configuration file
/usr/lib/systemd/system/user@.service.d/user-aklog.conf is marked
executable. Please remove executable permission bits. Proceeding anyway.
indeed probably a typo.
Just noticed:
Configuration file
/usr/lib/systemd/system/user@.service.d/user-aklog.conf is marked
executable. Please remove executable permission bits. Proceeding anyway.
indeed probably a typo.
Steve Traylen (8eb76535) at 06 Feb 09:45
Drop o+x on configuration file
Ben Morrice (c932dd43) at 01 Feb 14:01
Merge branch 'lesslogging' into 'master'
Steve Traylen (60f3591e) at 01 Feb 14:00
All the aklog or kinit commands have debug options on them.
Make them less chatty.
Ben Morrice (c932dd43) at 01 Feb 14:00
Merge branch 'lesslogging' into 'master'
... and 1 more commit
All the aklog or kinit commands have debug options on them.
Make them less chatty.
Steve Traylen (60f3591e) at 01 Feb 12:21
Make commands less chatty
Steve Traylen (c19d0f2a) at 01 Feb 12:19
Ben Morrice (c19d0f2a) at 08 Jan 13:25
Use AUTOTAG
Ben Morrice (b6838891) at 08 Jan 13:11
Correct grammar in unit file comments
Ben Morrice (b6838891) at 08 Jan 13:10
Correct grammar in unit file comments
Hi,
I just found out that under some conditions (and please don't ask me what exactly those are because I cannot truly reproduce this), the aklog service will fail when trying to renew a non-renewable Kerberos ticket. This then makes the whole service fail, and one has to manually restart it to get going again. Adding a '-' to the 'kinit' line silences this failure, and makes things 'just work' in the next round:
So: ExecStart=/usr/bin/kinit -V -R
→ ExecStart=-/usr/bin/kinit -V -R
.
This seems to happen when a user logs in (for the first time?) with a non-renewable Kerberos ticket, using 'GSSAPIAuthentication yes'.
Cheers, Jeroen
Thanks Jeroen, yes this makes sense to not fail the unit completely in this circumstance.
I've created !13 (merged) and a new version of cern-aklog-systemd-user
will be released in the coming days.
Thanks for the report.
Ben Morrice (73175808) at 08 Jan 13:05
Ben Morrice (9e072f24) at 08 Jan 13:05
Merge branch 'permitfailure' into 'master'
... and 1 more commit