pyrox.dev / nixpkgs
lol
fork atom

Merge pull request #98731 from mayflower/ldap-nss-optional

config.users.ldap: do not include nss module if turned off

Linus Heckemann f448ec33 54e9ee81

options
unified split
Changed files
+2 -2
nixos
modules
config
ldap.nix
+2 -2
nixos/modules/config/ldap.nix 
···

       
238

       
238

       
 

       
      '';


     

       
239

       
239

       
 

       
    };


     

       
240

       
240

       
 

       



     

       
241

       

       
-

       
    system.nssModules = singleton (


     

       

       
241

       
+

       
    system.nssModules = mkIf cfg.nsswitch (singleton (


     

       
242

       
242

       
 

       
      if cfg.daemon.enable then nss_pam_ldapd else nss_ldap


     

       
243

       

       
-

       
    );


     

       

       
243

       
+

       
    ));


     

       
244

       
244

       
 

       



     

       
245

       
245

       
 

       
    system.nssDatabases.group = optional cfg.nsswitch "ldap";


     

       
246

       
246

       
 

       
    system.nssDatabases.passwd = optional cfg.nsswitch "ldap";