From: Steve Dickson <steved@redhat.com>
To: Linux NFS Mailing list <linux-nfs@vger.kernel.org>
Subject: [PATCH] systemd: Only start the rpc-gssd service when its enabled
Date: Wed, 15 Jun 2016 12:34:56 -0400 [thread overview]
Message-ID: <1466008496-9932-1-git-send-email-steved@redhat.com> (raw)
When Kerberos is enabled, the /etc/krb5.keytab exists
which causes the rpc-gssd to start, automatically.
With rpc.gssd running, on all NFS mounts, an
upcall is done to get GSS security context for
SETCLIENTID procedure.
When Kerberos is not configured for NFS, meaning
there is no host/hostname@REALM principal in
the key tab, those upcalls always fall causing
the mount to hang for several seconds.
This patch adds an [Install] section so the service
can be enable and disable, so those errant upcalls
can be stopped which eliminating the delay.
Signed-off-by: Steve Dickson <steved@redhat.com>
---
systemd/rpc-gssd.service | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/systemd/rpc-gssd.service b/systemd/rpc-gssd.service
index d4a3819..df9f090 100644
--- a/systemd/rpc-gssd.service
+++ b/systemd/rpc-gssd.service
@@ -17,3 +17,9 @@ EnvironmentFile=-/run/sysconfig/nfs-utils
Type=forking
ExecStart=/usr/sbin/rpc.gssd $GSSDARGS
+
+# Only start if service is enabled
+# and /etc/krb5.keytab exists
+[Install]
+WantedBy=multi-user.target
+
--
2.5.5
reply other threads:[~2016-06-15 16:34 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1466008496-9932-1-git-send-email-steved@redhat.com \
--to=steved@redhat.com \
--cc=linux-nfs@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).