Package: gssproxy
Version: 0.9.1-1+b1
Severity: important
Tags: patch
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these template lines ***
I'm using gssproxy at my client for automatically getting a kerberos ticket for
a service, without user intervention. I installed and startet the service but
it was not working until i figured, that I need to create this directory as it
is references in the default config file 99-nfs-client.config. And it has to be
recreated after each restart of my client as files in /tmp do not survive a
reboot.
So I have added an override to /etc/systemd/system/gssproxy.service.d:
[Service]
ExecStartPre=/bin/mkdir -p /tmp/gssproxy/clients
PrivateTmp=true
To actually be used by rpc-gssd.service a second overriide is neccessary for
this service:
[Service]
Environment=GSS_USE_PROXY=yes
Without these two additions gssproxy was not working on my client, so I think
they should be included in the package - or at least be mentioned in the docs
and may be as a comment in the configuration file.
-- System Information:
Debian Release: 12.5
APT prefers stable
APT policy: (990, 'stable'), (900, 'stable-updates')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.1.0-18-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages gssproxy depends on:
ii init-system-helpers 1.65.2
ii libc6 2.36-9+deb12u4
ii libgssapi-krb5-2 1.20.1-2+deb12u1
ii libgssrpc4 1.20.1-2+deb12u1
ii libini-config5 0.6.2-1
ii libk5crypto3 1.20.1-2+deb12u1
ii libkrb5-3 1.20.1-2+deb12u1
ii libpopt0 1.19+dfsg-1
ii libref-array1 0.6.2-1
ii libselinux1 3.4-1+b6
ii libverto1 0.3.1-1
gssproxy recommends no packages.
gssproxy suggests no packages.
-- Configuration Files:
/etc/gssproxy/gssproxy.conf changed [not included]
-- no debconf information
[Service]
ExecStartPre=/bin/mkdir -p /tmp/gssproxy/clients
ProtectHome=true
PrivateTmp=true
ProtectSystem=full
ProtectClock=true
ProtectControlGroups=true
ProtectKernelLogs=true
RestrictRealtime=true
