public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

kerberos-server: move kadmind to systemd

Browse Source 
Don't use socket activation, as inetd is discouraged by heimdal documentation.
This commit is contained in:
Kai Wohlfahrt 2017-11-06 16:08:41 +00:00 committed by Kai Wohlfahrt
parent dfdd348206
commit ee3bd730d4
1 changed files with 4 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
nixos/modules/services/system/kerberos.nix
View File

@ -34,16 +34,10 @@ in
config = mkIf config.services.kerberos_server.enable { config = mkIf config.services.kerberos_server.enable {
environment.systemPackages = [ heimdalFull ]; environment.systemPackages = [ heimdalFull ];
systemd.services.kadmind = {
services.xinetd.enable = true; description = "Kerberos Administration Daemon";
services.xinetd.services = lib.singleton script = "${pkgs.heimdalFull}/libexec/heimdal/kadmind";
{ name = "kerberos-adm"; };
flags = "REUSE NAMEINARGS";
protocol = "tcp";
user = "root";
server = "${pkgs.tcp_wrappers}/bin/tcpd";
serverArgs = "${pkgs.heimdalFull}/libexec/heimdal/kadmind";
};
systemd.services.kdc = { systemd.services.kdc = {
description = "Key Distribution Center daemon"; description = "Key Distribution Center daemon";