[systemd-devel] Why working this on reboot but not on start up

[Andrei Borzenkov]

В Thu, 2 Oct 2014 13:55:19 +0300
Mantas Mikulėnas <grawity at gmail.com> пишет:

> On Tue, Sep 30, 2014 at 8:24 PM, Günther J. <gjn at gjn.priv.at> wrote:
> > Hello,
> >
> > Am Dienstag, 30. September 2014, 20:38:10 schrieb Andrei Borzenkov:
> >> В Tue, 30 Sep 2014 13:24:13 +0200
> >>
> >> Günther J. Niederwimmer <gjn at gjn.priv.at> пишет:
> >> > Hello,
> >> >
> >> > I have a problem to run this correct, it is working on a reboot but not on
> >> > start up.
> >>
> >> What "does not work" means exactly?
> >
> > Bette I say it works sometime but the most of the Time not
> >
> >> > Can any help me for this Problem, Thanks.
> >>
> >> Without clear explanation what "working" and what "not working" is?
> >> Unlikely.
> >
> > I have a 0/SUCCESS in the status but I have no Principal
> 
> What do you have in the system log then? Doesn't kinit output any
> error messages to the journal?
> 
> Also, *where* are you looking for the tickets? Your .service unit does
> not specify the cache location anywhere, so kinit might not be using
> the location you expect – it might be using FILE:/tmp/krb5cc_0 or
> something such.
> 

It is openSUSE so tickets go into /run/user/<uid>/something-I-forgot

And yes, this turned out to be a problem for services started by root
because this directory does not yet exist.

> >
> >> > After=SuSEfirewall2_setup.service
> >> >
> >> > [Service]
> >> > Type=simple
> >>
> >> Do you really mean it? I'd rather expect oneshot here.
> >
> > I have a systemd  Error with oneshot
> 
> What error?
> 
> Type=simple is really wrong for kinit. It would be fine for k5start.
> 
> >> > ExecStart=/usr/bin/kinit -k host/asmtp.gjn.prv
> >> > Restart=on-failure
> >> > RestartSec=30
> >> >
> >> > [Install]
> >> > WantedBy=multi-user.target
> >> >
> >> >
> >> > /etc/systemd/system/kinit.timer
> >> > [Unit]
> >> > Description=Fist Initialisation of KRB5
> >> >
> >> > [Timer]
> >> > OnBootSec=3min
> >> >
> >> > [Install]
> >> > WantedBy=timers.target
> >>
> >> Why do you need to start it two times - once as normal service and
> >> second time as timer?
> >
> > Normal, I like to start only with timer service.
> 
> Then why does your .service have an [Install] section?
> 
> ///
> 
> I suggest using `k5start` instead, as a regular `kinit` will just
> obtain a ticket but won't do anything when it expires in a few hours.
> 
> [Unit]
> After=network.target
> 
> [Service]
> Type=forking
> ExecStart=/usr/bin/k5start -k FILE:/tmp/krb5cc_host -L -b -K 30 -f
> /etc/krb5.keytab -u host/asmtp.gjn.prv
> Restart=on-failure
> 
> [Install]
> WantedBy=multi-user.target
>