From 3d6d125917073b06849c336c93e475a5a43c0dd9 Mon Sep 17 00:00:00 2001
From: Stephen Gallagher <sgallagh@redhat.com>
Date: Fri, 17 Oct 2014 11:43:39 -0400
Subject: systemd: ensure that accounts service starts after NSS initializes

The various NSS calls don't give accurate results in some configurations
until midway through boot up.  This is because SSSD or winbind (or
whatever) needs to initialize.

In order to prevent accounts service from using NSS prematurely, we need
to add an ordering constraint between the nss-user-lookup.target and
accountsservice.

This commit accomplishes this by adding the appropriate Wants= and
After= directives to the accountsservice systemd unit file.

diff --git a/data/accounts-daemon.service.in b/data/accounts-daemon.service.in
index 105bf6a..feedf3e 100644
--- a/data/accounts-daemon.service.in
+++ b/data/accounts-daemon.service.in
@@ -1,6 +1,12 @@
 [Unit]
 Description=Accounts Service
 
+# In order to avoid races with identity-providing services like SSSD or
+# winbind, we need to ensure that Accounts Service starts after
+# nss-user-lookup.target
+After=nss-user-lookup.target
+Wants=nss-user-lookup.target
+
 [Service]
 Type=dbus
 BusName=org.freedesktop.Accounts
-- 
cgit v0.10.2