summaryrefslogtreecommitdiffstats
path: root/systemd/auth-rpcgss-module.service
diff options
context:
space:
mode:
Diffstat (limited to 'systemd/auth-rpcgss-module.service')
-rw-r--r--systemd/auth-rpcgss-module.service18
1 files changed, 18 insertions, 0 deletions
diff --git a/systemd/auth-rpcgss-module.service b/systemd/auth-rpcgss-module.service
new file mode 100644
index 0000000..4a69a7b
--- /dev/null
+++ b/systemd/auth-rpcgss-module.service
@@ -0,0 +1,18 @@
+# We want to start gss-proxy on kernels that support it and rpc.svcgssd
+# on those that don't. Those services check for support by checking
+# for existence of the path /proc/net/rpc/use-gss-proxy. Before they
+# can perform that check, they need this module loaded. (Unless
+# rpcsec_gss support is built directly into the kernel, in which case this
+# unit will fail. But that's OK.)
+[Unit]
+Description=Kernel Module supporting RPCSEC_GSS
+DefaultDependencies=no
+Before=gssproxy.service rpc-svcgssd.service rpc-gssd.service
+Wants=gssproxy.service rpc-gssd.service
+ConditionPathExists=/etc/krb5.keytab
+ConditionVirtualization=!container
+
+[Service]
+Type=oneshot
+ExecStart=/sbin/modprobe -q auth_rpcgss
+RemainAfterExit=yes