Package: gssproxy Version: 0.9.1-1+b1 Severity: important Tags: patch Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? * What exactly did you do (or not do) that was effective (or ineffective)? * What was the outcome of this action? * What outcome did you expect instead? *** End of the template - remove these template lines *** I'm using gssproxy at my client for automatically getting a kerberos ticket for a service, without user intervention. I installed and startet the service but it was not working until i figured, that I need to create this directory as it is references in the default config file 99-nfs-client.config. And it has to be recreated after each restart of my client as files in /tmp do not survive a reboot. So I have added an override to /etc/systemd/system/gssproxy.service.d: [Service] ExecStartPre=/bin/mkdir -p /tmp/gssproxy/clients PrivateTmp=true To actually be used by rpc-gssd.service a second overriide is neccessary for this service: [Service] Environment=GSS_USE_PROXY=yes Without these two additions gssproxy was not working on my client, so I think they should be included in the package - or at least be mentioned in the docs and may be as a comment in the configuration file. -- System Information: Debian Release: 12.5 APT prefers stable APT policy: (990, 'stable'), (900, 'stable-updates') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.1.0-18-amd64 (SMP w/4 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) Versions of packages gssproxy depends on: ii init-system-helpers 1.65.2 ii libc6 2.36-9+deb12u4 ii libgssapi-krb5-2 1.20.1-2+deb12u1 ii libgssrpc4 1.20.1-2+deb12u1 ii libini-config5 0.6.2-1 ii libk5crypto3 1.20.1-2+deb12u1 ii libkrb5-3 1.20.1-2+deb12u1 ii libpopt0 1.19+dfsg-1 ii libref-array1 0.6.2-1 ii libselinux1 3.4-1+b6 ii libverto1 0.3.1-1 gssproxy recommends no packages. gssproxy suggests no packages. -- Configuration Files: /etc/gssproxy/gssproxy.conf changed [not included] -- no debconf information
[Service] ExecStartPre=/bin/mkdir -p /tmp/gssproxy/clients ProtectHome=true PrivateTmp=true ProtectSystem=full ProtectClock=true ProtectControlGroups=true ProtectKernelLogs=true RestrictRealtime=true