kerberos-server: move kadmind to systemd

Don't use socket activation, as inetd is discouraged by heimdal documentation.
This commit is contained in:
Kai Wohlfahrt 2017-11-06 16:08:41 +00:00 committed by Kai Wohlfahrt
parent dfdd348206
commit ee3bd730d4

View File

@ -34,16 +34,10 @@ in
config = mkIf config.services.kerberos_server.enable {
environment.systemPackages = [ heimdalFull ];
services.xinetd.enable = true;
services.xinetd.services = lib.singleton
{ name = "kerberos-adm";
flags = "REUSE NAMEINARGS";
protocol = "tcp";
user = "root";
server = "${pkgs.tcp_wrappers}/bin/tcpd";
serverArgs = "${pkgs.heimdalFull}/libexec/heimdal/kadmind";
};
systemd.services.kadmind = {
description = "Kerberos Administration Daemon";
script = "${pkgs.heimdalFull}/libexec/heimdal/kadmind";
};
systemd.services.kdc = {
description = "Key Distribution Center daemon";