about summary refs log tree commit diff
diff options
context:
space:
mode:
authorKai Wohlfahrt <kjw53@cam.ac.uk>2017-11-06 16:08:41 +0000
committerKai Wohlfahrt <kai@prodo.ai>2018-12-11 13:33:10 +0000
commitee3bd730d472b36bf620b0001519c5aab2073f09 (patch)
tree90ca13a59807b91bc8f1f4fbecca7cfa891f4561
parentdfdd3482065c0b10b8bbd1955e74c8e092230a02 (diff)
downloadnixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar
nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.gz
nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.bz2
nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.lz
nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.xz
nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.zst
nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.zip
kerberos-server: move kadmind to systemd
Don't use socket activation, as inetd is discouraged by heimdal documentation.
-rw-r--r--nixos/modules/services/system/kerberos.nix14
1 files changed, 4 insertions, 10 deletions
diff --git a/nixos/modules/services/system/kerberos.nix b/nixos/modules/services/system/kerberos.nix
index e6cfd0a8289c..5647281db983 100644
--- a/nixos/modules/services/system/kerberos.nix
+++ b/nixos/modules/services/system/kerberos.nix
@@ -34,16 +34,10 @@ in
   config = mkIf config.services.kerberos_server.enable {
 
     environment.systemPackages = [ heimdalFull ];
-
-    services.xinetd.enable = true;
-    services.xinetd.services = lib.singleton
-      { name = "kerberos-adm";
-        flags = "REUSE NAMEINARGS";
-        protocol = "tcp";
-        user = "root";
-        server = "${pkgs.tcp_wrappers}/bin/tcpd";
-        serverArgs = "${pkgs.heimdalFull}/libexec/heimdal/kadmind";
-      };
+    systemd.services.kadmind = {
+      description = "Kerberos Administration Daemon";
+      script = "${pkgs.heimdalFull}/libexec/heimdal/kadmind";
+    };
 
     systemd.services.kdc = {
       description = "Key Distribution Center daemon";