Nest kerberos settings in settings

2024-07-04 22:22:10 -07:00 · 2024-07-04 22:22:10 -07:00 · c1eb271eda
commit c1eb271eda
parent dfad95b705
1 changed files with 15 additions and 13 deletions
--- a/lib/fudo/auth/kerberos/default.nix
+++ b/lib/fudo/auth/kerberos/default.nix
@ -9,6 +9,7 @@ in {
    security.krb5 = {
      enable = true;
      kerberos = pkgs.heimdal;
+      settings = {
        libdefaults = {
          default_realm = realm;
          allow_weak_crypto = false;
@ -24,6 +25,7 @@ in {
          forward = true;
        };
      };
+    };

    security.pam.krb5.enable = true;