commit b3af89dd388831ab13e769a62375a3bdb758ad3f · pyrox.dev/nixpkgs

nixos/modules/services/system/kerberos/default.nix

···

       7
        
       

     

       8
        
       let

     

       9
        
         inherit (lib) mkOption types;

     

       0
        
       
     

       10
        
         cfg = config.services.kerberos_server;

     

       11
        
         inherit (config.security.krb5) package;

     

       12
        
       

     
···

       40
        
                 - MIT Kerberos: <https://web.mit.edu/kerberos/krb5-1.21/doc/admin/conf_files/kdc_conf.html>

     

       41
        
               '';

     

       42
        
               default = { };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       43
        
             };

     

       44
        
           };

     

       45
        
         };

···

       7
        
       

     

       8
        
       let

     

       9
        
         inherit (lib) mkOption types;

     

       10
       +
         inherit (lib.types) listOf str;

     

       11
        
         cfg = config.services.kerberos_server;

     

       12
        
         inherit (config.security.krb5) package;

     

       13
        
       

     
···

       41
        
                 - MIT Kerberos: <https://web.mit.edu/kerberos/krb5-1.21/doc/admin/conf_files/kdc_conf.html>

     

       42
        
               '';

     

       43
        
               default = { };

     

       44
       +
             };

     

       45
       +
       

     

       46
       +
             extraKDCArgs = mkOption {

     

       47
       +
               type = listOf str;

     

       48
       +
               description = ''

     

       49
       +
                 Extra arguments to pass to the KDC process. See {manpage}`kdc(8)`.

     

       50
       +
               '';

     

       51
       +
               default = [ ];

     

       52
        
             };

     

       53
        
           };

     

       54
        
         };

+10 -1

nixos/modules/services/system/kerberos/heimdal.nix

···

       2
        
         pkgs,

     

       3
        
         config,

     

       4
        
         lib,

     

       0
        
       
     

       5
        
         ...

     

       6
        
       }:

     

       7
        
       

     

       8
        
       let

     

       9
        
         inherit (lib) mapAttrs;

     

       0
        
       
     

       0
        
       
     

       10
        
         cfg = config.services.kerberos_server;

     

       11
        
         package = config.security.krb5.package;

     

       12
        
       

     
···

       94
        
               "info:heimdal"

     

       95
        
             ];

     

       96
        
             serviceConfig = {

     

       97
       -
               ExecStart = "${package}/libexec/kdc --config-file=/etc/heimdal-kdc/kdc.conf";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       98
        
               Slice = "system-kerberos-server.slice";

     

       99
        
               StateDirectory = "heimdal";

     

       100
        
             };

···

       2
        
         pkgs,

     

       3
        
         config,

     

       4
        
         lib,

     

       5
       +
         utils,

     

       6
        
         ...

     

       7
        
       }:

     

       8
        
       

     

       9
        
       let

     

       10
        
         inherit (lib) mapAttrs;

     

       11
       +
         inherit (utils) escapeSystemdExecArgs;

     

       12
       +
       

     

       13
        
         cfg = config.services.kerberos_server;

     

       14
        
         package = config.security.krb5.package;

     

       15
        
       

     
···

       97
        
               "info:heimdal"

     

       98
        
             ];

     

       99
        
             serviceConfig = {

     

       100
       +
               ExecStart = escapeSystemdExecArgs (

     

       101
       +
                 [

     

       102
       +
                   "${package}/libexec/kdc"

     

       103
       +
                   "--config-file=/etc/heimdal-kdc/kdc.conf"

     

       104
       +
                 ]

     

       105
       +
                 ++ cfg.extraKDCArgs

     

       106
       +
               );

     

       107
        
               Slice = "system-kerberos-server.slice";

     

       108
        
               StateDirectory = "heimdal";

     

       109
        
             };

+11 -1

nixos/modules/services/system/kerberos/mit.nix

···

       2
        
         pkgs,

     

       3
        
         config,

     

       4
        
         lib,

     

       0
        
       
     

       5
        
         ...

     

       6
        
       }:

     

       7
        
       

     

       8
        
       let

     

       9
        
         inherit (lib) mapAttrs;

     

       0
        
       
     

       0
        
       
     

       10
        
         cfg = config.services.kerberos_server;

     

       11
        
         package = config.security.krb5.package;

     

       12
        
         PIDFile = "/run/kdc.pid";

     
···

       91
        
             serviceConfig = {

     

       92
        
               Type = "forking";

     

       93
        
               PIDFile = PIDFile;

     

       94
       -
               ExecStart = "${package}/bin/krb5kdc -P ${PIDFile}";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       95
        
               Slice = "system-kerberos-server.slice";

     

       96
        
               StateDirectory = "krb5kdc";

     

       97
        
             };

···

       2
        
         pkgs,

     

       3
        
         config,

     

       4
        
         lib,

     

       5
       +
         utils,

     

       6
        
         ...

     

       7
        
       }:

     

       8
        
       

     

       9
        
       let

     

       10
        
         inherit (lib) mapAttrs;

     

       11
       +
         inherit (utils) escapeSystemdExecArgs;

     

       12
       +
       

     

       13
        
         cfg = config.services.kerberos_server;

     

       14
        
         package = config.security.krb5.package;

     

       15
        
         PIDFile = "/run/kdc.pid";

     
···

       94
        
             serviceConfig = {

     

       95
        
               Type = "forking";

     

       96
        
               PIDFile = PIDFile;

     

       97
       +
               ExecStart = escapeSystemdExecArgs (

     

       98
       +
                 [

     

       99
       +
                   "${package}/bin/krb5kdc"

     

       100
       +
                   "-P"

     

       101
       +
                   "${PIDFile}"

     

       102
       +
                 ]

     

       103
       +
                 ++ cfg.extraKDCArgs

     

       104
       +
               );

     

       105
        
               Slice = "system-kerberos-server.slice";

     

       106
        
               StateDirectory = "krb5kdc";

     

       107
        
             };