From acfea4453da108b5615a5c8b99a144af4f7ad1ab Mon Sep 17 00:00:00 2001
From: Yohann D'ANELLO <ynerant@crans.org>
Date: Sat, 26 Jun 2021 08:43:37 +0200
Subject: [PATCH] [sssd] Use socket activation

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
---
 roles/sssd/tasks/main.yml              | 8 ++++++++
 roles/sssd/templates/sssd/sssd.conf.j2 | 1 -
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/roles/sssd/tasks/main.yml b/roles/sssd/tasks/main.yml
index b5d5324e..d1b16882 100644
--- a/roles/sssd/tasks/main.yml
+++ b/roles/sssd/tasks/main.yml
@@ -18,6 +18,14 @@
     mode: 0600
   notify: Restart sssd service
 
+- name: Enable sssd socket activation
+  systemd:
+    name: "sssd-{{ item }}"
+    enabled: true
+  loop:
+    - nss
+    - pam
+
 - name: Configure nslcd for hosts
   template:
     src: nslcd.conf.j2
diff --git a/roles/sssd/templates/sssd/sssd.conf.j2 b/roles/sssd/templates/sssd/sssd.conf.j2
index 8c157cc7..4dfce22d 100644
--- a/roles/sssd/templates/sssd/sssd.conf.j2
+++ b/roles/sssd/templates/sssd/sssd.conf.j2
@@ -1,7 +1,6 @@
 {{ ansible_header | comment }}
 [sssd]
 config_file_version = 2
-services = nss, pam
 domains = {{ sssd.primary.domain }}, {{ sssd.secondary.domain }}
 
 [domain/{{ sssd.primary.domain }}]
-- 
GitLab