Per the packaging guidelines these don't seem to be optional:
https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_sy...
Additionally, at a minimum systemctl daemon-reload should be run. It looks
like there is some sort of default behavior but it's not correct.
Warning: The unit file, source configuration file or drop-ins of
sssd-kcm.socket changed on disk. Run 'systemctl daemon-reload' to reload
units.
Warning: The unit file, source configuration file or drop-ins of
sssd-kcm.service changed on disk. Run 'systemctl daemon-reload' to reload
units.
Even the base sssd service seems to be missing daemon-reload:
Warning: The unit file, source configuration file or drop-ins of
sssd.service changed on disk. Run 'systemctl daemon-reload' to reload units.
For the other services provided the default behavior seems to be of the
try-restart variety but all (most?) of these are indirectly started by
socket activation so should be using %systemd_postun and not
%systemd_postun_with_restart:
Failed to try-restart sssd-autofs.service: Operation refused, unit
sssd-autofs.service may be requested by dependency only (it is configured
to refuse manual start/stop).
See system logs and 'systemctl status sssd-autofs.service' for details.
Failed to try-restart sssd-nss.service: Operation refused, unit
sssd-nss.service may be requested by dependency only (it is configured to
refuse manual start/stop).
See system logs and 'systemctl status sssd-nss.service' for details.
Failed to try-restart sssd-pac.service: Operation refused, unit
sssd-pac.service may be requested by dependency only (it is configured to
refuse manual start/stop).
See system logs and 'systemctl status sssd-pac.service' for details.
Failed to try-restart sssd-pam.service: Operation refused, unit
sssd-pam.service may be requested by dependency only (it is configured to
refuse manual start/stop).
See system logs and 'systemctl status sssd-pam.service' for details.
Failed to try-restart sssd-ssh.service: Operation refused, unit
sssd-ssh.service may be requested by dependency only (it is configured to
refuse manual start/stop).
See system logs and 'systemctl status sssd-ssh.service' for details.
Failed to try-restart sssd-sudo.service: Operation refused, unit
sssd-sudo.service may be requested by dependency only (it is configured to
refuse manual start/stop).
See system logs and 'systemctl status sssd-sudo.service' for details.
Looking at my dnf rpm log, this seems to have been going on for quite some
time and I can't believe I'm the first to notice...
Thanks,
Richard