#4045 Duplicate sssd_pac process when using IPA backend
Closed: cloned-to-github 3 years ago by pbrezina. Opened 4 years ago by yrro.

sssd-pac.socket uses the usual mechanism for preventing it from starting while services = pac is present in sssd.conf:

ExecStartPre=/usr/libexec/sssd/sssd_check_socket_activated_responders -r pac

However, in the case that sssd is configured to use a backend using the IPA provider and services is not set, or is set but does not contain pac, then the add_implicit_services function will add the pac to the service list at run time. This is not detected by sssd_check_socket_activated_reponders and you end up with two instances of sssd_pac running, one spawned by sssd and the other by systemd.

Quick and dirty fix: modify sssd_check_socket_activated_responders to use the same logic as sssd, that is, fail if any domain section in sssd.conf has id_provider = ipa.


Metadata Update from @pbrezina:
- Issue tagged with: Future milestone

4 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5013

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @pbrezina:
- Issue close_status updated to: cloned-to-github
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata