···

       
77
       
 
       
  };

     

       
78
       
 
       
  config = mkMerge [

     

       
79
       
 
       
    (mkIf cfg.enable {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
80
       
 
       
      systemd.services.sssd = {

     

       
81
       
 
       
        description = "System Security Services Daemon";

     

       
82
       
 
       
        wantedBy    = [ "multi-user.target" ];

     
···

       
101
       
 
       
          EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile;

     

       
102
       
 
       
        };

     

       
103
       
 
       
        preStart = ''

     

       
0
       
 
       

     

       
104
       
 
       
          [ -f ${settingsFile} ] && rm -f ${settingsFile}

     

       
105
       
 
       
          old_umask=$(umask)

     

       
106
       
 
       
          umask 0177

     

···

       
77
       
 
       
  };

     

       
78
       
 
       
  config = mkMerge [

     

       
79
       
 
       
    (mkIf cfg.enable {

     

       
80
       
+
       
      # For `sssctl` to work.

     

       
81
       
+
       
      environment.etc."sssd/sssd.conf".source = settingsFile;

     

       
82
       
+
       
      environment.etc."sssd/conf.d".source = "${dataDir}/conf.d";

     

       
83
       
+
       


     

       
84
       
 
       
      systemd.services.sssd = {

     

       
85
       
 
       
        description = "System Security Services Daemon";

     

       
86
       
 
       
        wantedBy    = [ "multi-user.target" ];

     
···

       
105
       
 
       
          EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile;

     

       
106
       
 
       
        };

     

       
107
       
 
       
        preStart = ''

     

       
108
       
+
       
          mkdir -p "${dataDir}/conf.d"

     

       
109
       
 
       
          [ -f ${settingsFile} ] && rm -f ${settingsFile}

     

       
110
       
 
       
          old_umask=$(umask)

     

       
111
       
 
       
          umask 0177

     

···

       
13
       
 
       
      start_all()

     

       
14
       
 
       
      machine.wait_for_unit("multi-user.target")

     

       
15
       
 
       
      machine.wait_for_unit("sssd.service")

     

       
0
       
 
       

     

       
16
       
 
       
    '';

     

       
17
       
 
       
})

     

···

       
13
       
 
       
      start_all()

     

       
14
       
 
       
      machine.wait_for_unit("multi-user.target")

     

       
15
       
 
       
      machine.wait_for_unit("sssd.service")

     

       
16
       
+
       
      machine.succeed("sssctl config-check")

     

       
17
       
 
       
    '';

     

       
18
       
 
       
})