[Freeipa-users] Re: named-pkcs11.service disabled?

[Brian J. Murrell]

On Mon, 2018-03-26 at 14:44 -0400, Rob Crittenden via FreeIPA-users
wrote:
>  
>  named requires 389-ds to be running. It is easier to manage the order
>  within IPA than systemd. 
Just curious, why is that more difficult in systemd?  Is this the
dirsrv.target, yes?  Is this difficulty a short-coming of systemd in
some way?

>  I'd suggest to setting it After=ipa.service 
In nss-lookup.target:

[Unit]
After=ipa.service

yes?

I think my point of bringing this up though was to identify a potential
defect that needs to be fixed in freeipa.  Do you disagree with that? 
Do you not feel that nss-lookup.target should wait for named-
pkcs11.service or some variant of it, perhaps in the form of
ipa.service?

Cheers,
b.