Enabling services via systemd only for certain targets

Hi everyone,
I have been searching and searching and I struggled through manpages but found nothing...
How can you enable services using systemd for a certain target?
Something like "systemd enable --target.graphical gdm".
My idea is to have 2 grub entries, one that boots into target.multi-user and the other that boots into target.graphical.
Then I would enable the gdm and other services I want for target.graphical but not for target.multi-user. That way I could choose on bootup if I want gnome this time or not and have a custom fallback/high performance mode.
I hope I'm not just utterly blind and wasting erverybodys time but I didn't find any information on this whatsoever.
Thanks in advance guys!
Last edited by Ch33f (2014-07-31 13:23:55)

Oh god this one almost hidden sentence:
If you make use of those it is suggested that you make a new named systemd target as /etc/systemd/system/your target that takes one of the existing runlevels as a base (you can look at /usr/lib/systemd/system/graphical.target as an example), make a directory /etc/systemd/system/your target.wants, and then symlink the additional services from /usr/lib/systemd/system/ that you wish to enable.
Ok thats a start.
But there is no parameter in "systemd enable" that I could use to do it?
Last edited by Ch33f (2014-07-31 13:43:49)

Similar Messages

How to enable Client Cert Required, only for certain URL's in the webserver

WE are using netegrity siteminder for authentication and their plugin is executed as AuthTrans function. If I enable clientauth in server.xml ( which is basically turning on the client cert required for entire site), everything works fine. But If I want to turn that on only for certain URL's how do I do that.
I tried turning global clientauth off in server.xml and tried using PathCehck fn"get-client-cert" in obj.conf for the URL's that need client cert, but the problem is AuthTrans is getting executed first and my netegrity plugin is throwing an error saying it cann't find the cert.
What are diffrent options to enable cert required only for certian URL's.
Thanks

What is the condition you want to match?
You can use get-client-cert in If tags in Web Server 7.0 :
For e.g. If the condition is matched, This gets a cert, requesting it if it is not already present and failing the request if it can't obtain an acceptable cert only on POST requests.
<If $url ~="*abc*>
PathCheck fn="get-client-cert" method="POST" dorequest="1" require="1"
</If>
or
<Object ppath="*abc*">
PathCheck fn="get-client-cert" dorequest="1" require="1"
<Object>
for more details :
http://docs.sun.com/app/docs/doc/819-2630/6n4thbiek?a=view#indexterm-380

Dbus[359]: [system] Activation via systemd failed for unit 'dbus-org.b

from journalctl -b, I get some warning messages like this.
Oct 26 12:52:48 myhost dbus-daemon[359]: dbus[359]: [system] Activating via systemd: service name='org.bluez' unit='dbus-org.bluez.service'
Oct 26 12:52:48 myhost dbus[359]: [system] Activating via systemd: service name='org.bluez' unit='dbus-org.bluez.service'
Oct 26 12:52:48 myhost dbus-daemon[359]: dbus[359]: [system] Activation via systemd failed for unit 'dbus-org.bluez.service': Unit dbus-org.
Oct 26 12:52:48 myhost dbus[359]: [system] Activation via systemd failed for unit 'dbus-org.bluez.service': Unit dbus-org.bluez.service fail
Oct 26 12:52:48 myhost pulseaudio[1234]: [pulseaudio] bluetooth-util.c: org.bluez.Manager.ListAdapters() failed: org.freedesktop.systemd1.Lo
Oct 26 12:52:49 myhost rtkit-daemon[1235]: Successfully made thread 1260 of process 1260 (/usr/bin/pulseaudio) owned by '1000' high priority
Oct 26 12:52:49 myhost rtkit-daemon[1235]: Supervising 2 threads of 2 processes of 1 users.
Oct 26 12:52:49 myhost pulseaudio[1260]: [pulseaudio] pid.c: Daemon already running.
I want to disalbe bluez.service,but failed,
#systemctl disable dbus-org.bluez.service
Failed to issue method call: No such file or directory
I have no bluetooth device in my laptop, how to resolve this porblem?
Thanks in advance.
Last edited by eastpeace (2012-10-26 06:12:53)

AND additional information
# systemctl status dbus-org.bluez.service
dbus-org.bluez.service
Loaded: error (Reason: No such file or directory)
Active: inactive (dead)

HT201299 Not enable or disable cellular data for certain iOS apps and features from setting? I keep it off but when I go to other app it on automatic

I can't enable or disable cellular data for certain iOS apps and features from setting.
When I off data for specific application and go to other option it automatic on all application
Any one can help

SOLUTION! (NO NEED TO RESET YOUR IPHONE SETTING!)
I have the same issue for the last two weeks. But i have already managed to solve the issue all by myself. When i go to Settings > Cellular > below the tab "use cellular data for:", i turned off some apps which i didnt want to use with cellular data. As soon as i go back to Settings, and then i went back to Cellular, the apps which i had switched off earlier, automatically turned back on.
Here's the solution:
Either you're using wifi or cellular data, first of all you're gonna hafto turn on the cellular data use for App Store. Once you have turned it on, go to App Store application. Update ALL the apps which have new updates available. If it asks you to log in your App Store, just do so. If there's something wrong with your debit or credit card information, it will ask you to update to a different card. Just do what it asks. Put in a new credit or debit card info and fill in the forms provided. The card you're using must be usable and has usable balance in it. Let's say atleast $10 to $20. As soon as it confirms your card successfully, the app updates will start automatically. Continue to update all the apps. After all updates are finished, go back to Settings > Cellular. Try to switch on or off some apps for data use and recheck.
Try it yourself! Have a nice day and don't put a blame on Apple for this.
From Malaysia, with love.
Please hit LIKE button if this solve your issue. Thank you very much! (:

Text Mandatory only for Certain Materials in Sales Order

Is there anyway so that I can make certain item text mandatory only for certain materials?
I tried creating new item category group and new item category. And then create new Text procedure making this text mandatory and assigning to this new item category.
But there are lot of different types of item categories assigned. So it does not look good to create new item category for each and everyone for this new item category group and material.
Please guide me how to make the document incomplete for certain materials only when one text is not filled at item level
Thanks in advance

Hi,
what you tried is correct and that is been followed in most of my projects wherever I worked. That is the best way recommended also.
If you try with incompletion procedures for item category also, you will endup doing multiple item categories anyway....
First when I looked at the subject line, even before I opened your POSTING, I got the same resolution as you did....May be the optimal one but, not sure, if something else is possible other than by doing user exit.
Regards

206 unable to set alert only for certain group

Hi,
is it a symbian unwanted feature that user is unable to set Nokia 206
profile to alert for certain group (even though this kind of functionality is
available on this phone)?
To be more precise user is able to set profile to alert only for certain
group but this setting has no effect (phone rebooted, groups recreated, etc. no effect)
This feature has been available and workin in previous Nokia phones
since last decace - is it a software quality issue or what.
Best regards,
Hez

It is the Application Pool account making the query to retrieve the groups, so you would need to establish a trust from Domain B -> A.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Text id only for certain sales organization (sales order)

Hello,
we created a new text-id vor the text object "vbbk".
In VOTXN we assigned this text object to our text procedure for the sales header.
So this text id appears in all sales orders.
How can we manage that a specific text id appears only for a certain sales organization?

We were afraid of this.
I think we will implement the following solution:
We will create a new text procedure and in USEREXIT_MOVE_FIELD_TO_TVCOM_H I will check the sales organization and assign the other text procedure to TVCOM.

Enable email account only for certain hours?

is there a way to enable an email account for specific hours in a day?
I check my work email during work hours, and would like to disable that account after work. I have been doing this manually, but I was hoping there is a way to schedule when the email account is active...
Thanks in advance
I looked in settings > mail > fetch, but if the account is active, manual checking will still connect after hours...Basically, if I'm not at work, I don't want to know

thanks for the definitive answer, I will request this...
Of course, I would also like a similar feature in Mail, but that doesn't seem forthcoming either

SSAS can't connect to services via IP; only domain

Is there some FMS-specific reason why a sendAndLoad function in SSAS couldn't connect to a site on an IP address? Are there any configurations that would need to be set to allow/deny this type of connection? We have a server instance that can only connect to sites hosted on fully qualified domains.

IPs should work for this, so I'll have to go for a few meta reasons perhaps
1. Perhaps the DNS is resolving to an IP that's not the one being targetted, we should probably double check that
2. Since a lot of load balancers end up serving a different IP to handle the traffic than is initially targetted we may be getting redirected via DNS but IP isn't working.
I'd confirm from that machine directly if possible - if not then I'd check if FMS from its general SSAS can connect to the IP as desired - if it can then perhaps there's a bug we're unaware of in there.
Asa

Preview Thumbnails on New Tab page empty only for certain URLs

When I open a new tab, there are three certain preview thumbnails which are always empty, and there is no way I can make them show up again. They did work in the beginning, but at some time the three previews vanished and never came back.
I have already tried to empy the cache and reload the sites as suggested here, but the thumbs are still empty. It's always the same three URLs where this happens. I have also cleared the history, opened the sites again and dragged the items from the history menu into a thumbnail - same result.

The pages may be send by the server with a no-cache or no-store header preventing Firefox to store that pages in the cache.<br />
Firefox will only generate thumbnails if the page is in the cache.
*https://support.mozilla.org/kb/thumbnails-on-new-tab-page-are-missing
The thumbnails on the about:newtab page are generated from the cache, so if the page is not in the cache or otherwise can't or won't (secure pages) be rendered as a PNG image then you will get an empty box.
*Do not use Clear Recent History to clear data like the cache and the history when you close Firefox
If there is no history then you get an about:newtab page with empty boxes (no URLs).
*[https://bugzilla.mozilla.org/show_bug.cgi?id=756881 bug 756881] - New tab thumbnails not displayed (or old images displayed) for Facebook, Twitter (sites using Cache-Control no-store)

Mutliple accounts: download new mails only for certain accounts

i have setup mail to have a few accounts. i can disable accounts in the preferences, but then they are not any longer shown in mail.
when i now open mail, all new mails from all accounts are retrieved. how can i have mail only download new mail for one (certain) account. maybe to trigger the download by hand? or have mail configured to download mails automatically for one account and manually for the others.
it is very anoying, when opening mail, that all accounts are processed. this takes time especially on a weak and slow internet connection, it also costs download traffic. i want to manually trigger the "get new mails" for accounts.
markus

thats not the point: i don't want the automatic push in the backround. setting "manual" only means: that the mails are retrieved when mail.app is openend. this is not what i want. i want to open mail.app and then choose which mails/accounts being retrieved!

Create Support Message via Help - Limitation for certain people

Hi,
i try to configure my SolMan, so that only a couple of person can create a support message with Help -> Create Support Message.
I look for a role, but can't find anything to solve this issue. Does anyone now what I have to customize, that only people I allow can create a support message in that way?
Thanks in advance
Michael

Thanks for your replies, but this doesn't solve my problem
1) When I don't create a business partner for those people, they can create messages, but then then the filed "message processor" would be empty in SolMan
2) which role do you mean? I tested with a test-user without any role - he can create support messages as well...
regards
Michael

Restricting certain users groups to read only for certain folders

Hi
I'm not sure if this is the correct forum, but hey, hopefully someone might now the answer or direct me to the correct one.
I'm writing a VB program to amend ACLs for specific user groups.
Effectively, I make all prior year folders read only, whereas the default for the group is Modify, Delete etc. This means they can continue to work in the "new year folders", but historic years is List/read only.
I've got to the point the program does everything I want, i.e. stops folder creation7deletion, file & folder name changes, copying for the historic years, but does not prevent deletion of files in the folder. Effectively I set Deny access on the
historic folders.
Testing using the Windows GUI would appear to resolve the problem is I change the Deny Special Permission (for the group) from "This folder only" to "This folder & files".
Question then is how to I set this in VB, the default appearing to be "This folder only"
Here's extract of my code
Thanks
IfvarDirectoryName.IndexOf("\"&
Date.Now.Year) = -1
Then
            FileAcl3.AddAccessRule(
NewFileSystemAccessRule(GroupAdmin(0),
FileSystemRights.Modify,
AccessControlType.Deny))
            FileAcl3.AddAccessRule(
NewFileSystemAccessRule(GroupAdmin(0),
FileSystemRights.DeleteSubdirectoriesAndFiles,
AccessControlType.Deny))
            FileAcl3.RemoveAccessRule(
NewFileSystemAccessRule(GroupAdmin(0),
FileSystemRights.ReadAndExecute,
AccessControlType.Deny))
            FileAcl3.RemoveAccessRule(
NewFileSystemAccessRule(GroupAdmin(0),
FileSystemRights.ListDirectory,
AccessControlType.Deny))
Dim FileInfo3 As IO.FileInfo = New IO.FileInfo(varDirectoryName)
Dim FileAcl3 As New FileSecurity
If varDirectoryName.IndexOf("\" & Date.Now.Year) = -1 Then
FileAcl3.AddAccessRule(New FileSystemAccessRule(GroupAdmin(0), FileSystemRights.Modify, AccessControlType.Deny))
FileAcl3.AddAccessRule(New FileSystemAccessRule(GroupAdmin(0), FileSystemRights.DeleteSubdirectoriesAndFiles, AccessControlType.Deny))
FileAcl3.RemoveAccessRule(New FileSystemAccessRule(GroupAdmin(0), FileSystemRights.ReadAndExecute, AccessControlType.Deny))
FileAcl3.RemoveAccessRule(New FileSystemAccessRule(GroupAdmin(0), FileSystemRights.ListDirectory, AccessControlType.Deny))
FileInfo3.SetAccessControl(FileAcl3)
End If

Ho Rohn
Your right, when I added the flags I got the following error at execution
{"No flags can be set. Parameter name: inheritanceFlags"}
I've developed a work around, which gives me exactly - subject to further testing - what I want. I simply mark each file in the relevant folders with a Deny Delete option.
I will however explore the DirectorySecurity class option, but initial review of the www seems a little shy on VB examples.
Thanks
Perry
You should be able to use FileSecurity and DirectorySecurity the same way (they have identical methods). Since this is a scripting forum, I'll provide a PowerShell example (which is fairly close to C# and VB; they all use the exact same classes):
$varDirectoryName = "c:\folder"
$GroupAdmin = "Admin Group"
$FileInfo3 = New-Object System.IO.DirectoryInfo $varDirectoryName
$FileAcl3 = $FileInfo3.GetAccessControl()
$FileAcl3.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule (
$GroupAdmin,
[System.Security.AccessControl.FileSystemRights]::Modify,
([System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor [System.Security.AccessControl.InheritanceFlags]::ObjectInherit),
[System.Security.AccessControl.PropagationFlags]::None,
[System.Security.AccessControl.AccessControlType]::Allow
$FileInfo3.SetAccessControl($FileAcl3)
I could have taken a lot of shortcuts when using the enumerations, but I think keeping it verbose helps show how similar the code can be.
Does that make sense?

Binding AD to OD but only for certain users.

We have a small (winXP) computerlab in an educational facility. In order to ensure that the computers are locked down they are all part of a Domain managed by a Win2003 AD server. I have done quite a few Registry Hacks to the Hive to make sure the users can't install software, or even see any drive's except, floppies, optical drives and zips. Our main service here is e-mail, and we are running an X-serve with all of the users in OpenLDAP (OD). We have quite a few users that we either don't need to be in our LDAP directory, or for security reasons shouldn't be, simply because they take a class for a semester and we never see them again. Some might say, well then just create a general account that the "outside" users can use and be done with it. The problem with that is, then all of the "outside" users see or can access the same "Home" drive. I suppose this wouldn't be a problem as long as they were notified that they could be giving access to their files to other users unless they used another storage mechanism (thumb drive, cd, outside FTP, etc.)
I was also curious what people's experience with using a hacked ntuser.dat to lockdown xp boxes was. I know it's possible, since that seems to be functionality built in. Also if anyone has had problems with multiple users using the same exact ntuser.dat file.

I figured it out on my own. I'd forgotten that my mother changed the account email addy, and I was changing it to the current one, which did nothing, as the songs were purchased on a second accout. Thanks anyway to anyone who considered rplying =)

I don't recall always having to enter admin. name and p/w when doing updates. Is this req't only for certain software. I am a bit paranoid now with the Mac Defender lurking about.

When completing the software updates I can't remember always having to enter administrator name and password. Maybe it's just been automatic on my part but now I rethink the process when I am asked to enter this info since the Mac Defender malware became an issue with Mac. Just wanted to know if this procedure occurs with all software updates or is it selective based on the type of update? This time is concerned Airport. Thanks for any insight.

Are you running as an Admin User or non-Admin? ie. have you set your Mac up with multiple user accounts - one as an Admin and one as a Standard user?
For security, you are better off having an Admin user account that has Admin privileges and a Standard user account that you use from day to day with standard privileges. When you install system updates you will be required to enter an Admin name and password, and any software that needs access to the system will require an Admin name and password, but anything that you install just for your user account that doesn't require total system access will be able to be dragged and dropped into your Application folder as per usual.
MacDefender runs in a web browser - that should be a huge red flag! If you see a warning when you are running Safari or another web browser close the browser window or Force Quit it. (under the Apple Menu => Force Quit...) In Safari Preferences untick Open "safe" files after downloading. (It will prevent an installer from automatically launching if something nasty is downloaded to your machine.) MacDefender and its variants attempt to trick people into installing stuff that will compromise their system. If something pops up unannounced on your machine that you didn't download, close it and delete it.
This article goes into depth about the MacDefender Malware:
http://rixstep.com/2/20110610,00.shtml
The salient points are summed up in the "Recapitulate" section at the bottom of the article: It's a bit Hipster Geeky.
"To Recapitulate
As recounted elsewhere, the Mac Defender attack is a well thought out attack that may have taken months to get together. The first step was to compromise websites of eejits, hack their FTP accounts, and upload dynamited files to their servers.
Then followed the Google whacks which led to people clicking on links they'd provided at the sites they'd hijacked.
And then finally they uploaded Mac Defender so people would get hit by it. And the purpose of Mac Defender is to scare you into thinking you're infected so you pull out your credit card.
Then the hackers run away with your credit card info and buy mink coats and chinchilla coats or whatever they want.
But staying clear of Mac Defender is really easy and doesn't require any AV software.
Don't ever open anything you didn't want to download.
Turn off JavaScript when accessing any Google Images site.
Make sure you don't have Safari set to automatically open downloads."
I'd add, keep your software up to date. Especially Adobe's Flash Plug-in as this is no longer supplied in system updates by Apple and could become an attack vector in the future. Always download software from reputable sources - ie. when downloading the Flash plug-in, get it from Adobe directly - don't follow a link from a website that tells you your version of Flash is out of date.
Enable your Firewall in System Preferences => Security => Firewall. Click on the Advanced button and Enable Stealth Mode too.
Also under:
System Preferences => Security => General.
Disable Automatic Login. Require a password to unlock each System Preferences pane. Use secure virtual memory. Automatically update safe downloads list.
Educate yourself.

Enabling services via systemd only for certain targets

Similar Messages

Maybe you are looking for