Philipp Huebner <[email protected]> writes: > Hi, > > you can find the relevant information with `man systemd.exec` under > "NoNewPrivileges".
Thanks. I checked that section.
>
> Please try setting NoNewPrivileges=false
I tried this but with no effect at all.
> or remove the line PrivateDevices=true in your service file. Remember
> to reload the systemd daemon afterwards.
Finally I removed this line along with above line added to the override
config and that worked.
No need of manually edit the shipped service file. Override can be done
using below command which will automatically does daemon-reload.
systemctl edit ejabberd.service
[Service]
PrivateDevices=
PrivateDevices=false
NoNewPrivileges=
NoNewPrivileges=false
The above snippet makes ejabberd PAM authentication work again.
I think this should be added as information to README.Debian which
mentions how to get PAM authentication part working. This breakage will
come as a surprise to people who upgrades from Jessie to Stretch and
this note will be really helpful for understanding what might have gone
wrong in their setup.
Best Regards,
Vasudev
signature.asc
Description: PGP signature

