On Wed, 2024-10-16 at 15:40 +0200, David Koňařík wrote:
> As far as I can tell, this is because the packaged systemd service
> sets "ProtectSystem=strict", which remounts everything read-only,
> including the PID file directory. I fixed this by setting
> "ProtectSystem=full"; "ReadWritePaths=/run" also works.

Thanks for reporting this. Interestingly, this doesn't happen on my own
Debian unstable system.

Can you check that this also works:

  ProtectSystem=strict
  StateDirectory=/run/nslcd

> By the way, why does nslcd.service run the daemon by calling a SysV
> init shell script?

Mostly because the init script also runs k5start if nslcd.conf contains
Kerberos authentication options (further configurable through
/etc/default/nslcd).

Thanks,

-- 
-- arthur - art...@arthurdejong.org - https://arthurdejong.org/ --

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to