Bug 1217435

Summary: ypbind.service should be loaded before nss-user-lookup.target
Product: Red Hat Enterprise Linux 7 Reporter: Siteshwar Vashisht <svashisht>
Component: ypbindAssignee: Petr Kubat <pkubat>
Status: CLOSED ERRATA QA Contact: Vaclav Danek <vdanek>
Severity: medium Docs Contact: Vladimír Slávik <vslavik>
Priority: medium    
Version: 7.0CC: hartsjc, hhorak, jscotka, lmiksik, mjahoda, nforro, ovasik, pkubat, todoleza
Target Milestone: rcKeywords: Patch
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: ypbind-1.37.1-9.el7 Doc Type: Bug Fix
Doc Text:
Remote users' account settings are no longer reverted to default settings on restart due to *ypbind* Because of wrong service starting order, *ypbind* did not start before all Name Service Switch (NSS) look-up operations had been completed. This caused the user's account settings file to revert to default settings on restart for users fulfilling all of the following conditions: * Using Gnome Display Manager auto-login * Using NIS authentication * Home directory located on NFS The *ypbind* service file ordering has been fixed to make *ypbind* start before the user/group database is set up. The user's account settings file is now handled properly.
 Story Points: ---
Clone Of:
: 1282440 (view as bug list) Environment:
Last Closed: 2017-08-01 23:07:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1298243, 1393868, 1400961    
Attachments:
Description Flags
Load ypbind before nss-user-lookup.target none

Comment 1 Siteshwar Vashisht 2015-04-30 11:10:36 UTC 
Description of problem:
ypbind.service should be loaded before nss-user-lookup.target.

If a gdm autologin user is authenticated using NIS and has it's home directory on NFS, it's '/var/lib/AccountsService/users/$USER' file gets overwritten on reboot. This issue was worked around by using below config file :

# cat /etc/systemd/system/accounts-daemon.service.d/nis-order-fix.conf
[Unit]
After=ypbind.service
After=nss-user-lookup.target
Wants=nss-user-lookup.target

Version-Release number of selected component (if applicable):
ypbind-1.37.1-7.el7.x86_64

How reproducible:
Always
Comment 4 Ray Strode [halfline] 2015-05-29 14:42:28 UTC 
we can work around this in accountsservice, but ypbind should be fixed too, or other things aside from accountsservice may hit issues.

ypbind backs an nss module so it needs 

Before=nss-user-lookup.target

otherwise it will be started at the wrong point in boot up.
Comment 5 Matej Mužila 2016-01-20 14:11:17 UTC 
Created attachment 1116660 [details]
Load ypbind before nss-user-lookup.target

Solves the issue mentioned in comment 4 .
Comment 20 errata-xmlrpc 2017-08-01 23:07:30 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:2202