On 11/01/18 19:49, Alex Corcoles via FreeIPA-users wrote:

> Jan 10 18:47:02 ctipa.h2.int.pdp7.net <http://ctipa.h2.int.pdp7.net> systemd[1]: Dependency failed for
> GSSAPI Proxy Daemon.
> -- Subject: Unit gssproxy.service has failed
> -- Defined-By: systemd
> -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel <http://lists.freedesktop.org/mailman/listinfo/systemd-devel>
> --
> -- Unit gssproxy.service has failed.
> --
> -- The result is dependency.
> Jan 10 18:47:02 ctipa.h2.int.pdp7.net <http://ctipa.h2.int.pdp7.net> systemd[1]: Job
> gssproxy.service/start failed with result 'dependency'.
> Jan 10 18:47:02 ctipa.h2.int.pdp7.net <http://ctipa.h2.int.pdp7.net> systemd[1]: Unit proc-fs-nfsd.mount
> entered failed state.

This is RHEL-7.4?  If you're not using NFS, you can remove the
"Requires=proc-fs-nfsd.mount" line from gssproxy.service.

I have Centos 7 in an LXC but both gssproxy & proc-fs-nfsd.mount start fine.(maybe different programs versions?)
What I see in my container is:

# systemctl status -l auth-rpcgss-module.service
● auth-rpcgss-module.service - Kernel Module supporting RPCSEC_GSS
   Loaded: loaded (/usr/lib/systemd/system/auth-rpcgss-module.service; static; vendor preset: disabled)
   Active: failed (Result: exit-code) since Fri 2018-01-12 10:59:30 UTC; 33min ago
  Process: 15 ExecStart=/sbin/modprobe -q auth_rpcgss (code=exited, status=1/FAILURE)
 Main PID: 15 (code=exited, status=1/FAILURE)

But above is simply about missing kernel drivers, which can be installed in LXC or mounted to host's fs, like with libvirt:

    <filesystem type='mount' accessmode='passthrough'>
      <source dir='/lib/modules'/>
      <target dir='/lib/modules'/>
    </filesystem>

and that problem goes away.

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org