diff options
author | Kai Wohlfahrt <kjw53@cam.ac.uk> | 2017-11-06 16:08:41 +0000 |
---|---|---|
committer | Kai Wohlfahrt <kai@prodo.ai> | 2018-12-11 13:33:10 +0000 |
commit | ee3bd730d472b36bf620b0001519c5aab2073f09 (patch) | |
tree | 90ca13a59807b91bc8f1f4fbecca7cfa891f4561 | |
parent | dfdd3482065c0b10b8bbd1955e74c8e092230a02 (diff) | |
download | nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.gz nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.bz2 nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.lz nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.xz nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.tar.zst nixlib-ee3bd730d472b36bf620b0001519c5aab2073f09.zip |
kerberos-server: move kadmind to systemd
Don't use socket activation, as inetd is discouraged by heimdal documentation.
-rw-r--r-- | nixos/modules/services/system/kerberos.nix | 14 |
1 files changed, 4 insertions, 10 deletions
diff --git a/nixos/modules/services/system/kerberos.nix b/nixos/modules/services/system/kerberos.nix index e6cfd0a8289c..5647281db983 100644 --- a/nixos/modules/services/system/kerberos.nix +++ b/nixos/modules/services/system/kerberos.nix @@ -34,16 +34,10 @@ in config = mkIf config.services.kerberos_server.enable { environment.systemPackages = [ heimdalFull ]; - - services.xinetd.enable = true; - services.xinetd.services = lib.singleton - { name = "kerberos-adm"; - flags = "REUSE NAMEINARGS"; - protocol = "tcp"; - user = "root"; - server = "${pkgs.tcp_wrappers}/bin/tcpd"; - serverArgs = "${pkgs.heimdalFull}/libexec/heimdal/kadmind"; - }; + systemd.services.kadmind = { + description = "Kerberos Administration Daemon"; + script = "${pkgs.heimdalFull}/libexec/heimdal/kadmind"; + }; systemd.services.kdc = { description = "Key Distribution Center daemon"; |