21 lines
705 B
INI
21 lines
705 B
INI
[Unit]
|
|
Description=System Security Services Daemon
|
|
# SSSD must be running before we permit user sessions
|
|
Before=systemd-user-sessions.service nss-user-lookup.target
|
|
Wants=nss-user-lookup.target
|
|
ConditionPathExists=|/etc/sssd/sssd.conf
|
|
ConditionDirectoryNotEmpty=|/etc/sssd/conf.d/
|
|
|
|
[Service]
|
|
Environment=DEBUG_LOGGER=--logger=files
|
|
EnvironmentFile=-/etc/default/sssd
|
|
ExecStart=/usr/sbin/sssd -i ${DEBUG_LOGGER}
|
|
Type=notify
|
|
NotifyAccess=main
|
|
PIDFile=/run/sssd.pid
|
|
CapabilityBoundingSet= CAP_IPC_LOCK CAP_CHOWN CAP_DAC_READ_SEARCH CAP_KILL CAP_NET_ADMIN CAP_SYS_NICE CAP_FOWNER CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_RESOURCE CAP_BLOCK_SUSPEND
|
|
Restart=on-failure
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|