From ae02e1fe53eaad4075976cf0b2cfcfa10f45094a Mon Sep 17 00:00:00 2001 From: Aaron Andersen Date: Sat, 26 Sep 2020 09:26:14 -0400 Subject: [PATCH] nixos/ldap: minor cosmetic fixes --- nixos/modules/config/ldap.nix | 22 +++++++++------------- 1 file changed, 9 insertions(+), 13 deletions(-) diff --git a/nixos/modules/config/ldap.nix b/nixos/modules/config/ldap.nix index 943a2434617e..e63f8c0d43e7 100644 --- a/nixos/modules/config/ldap.nix +++ b/nixos/modules/config/ldap.nix @@ -59,22 +59,18 @@ in users.ldap = { - enable = mkOption { - type = types.bool; - default = false; - description = "Whether to enable authentication against an LDAP server."; - }; + enable = mkEnableOption "authentication against an LDAP server"; loginPam = mkOption { type = types.bool; default = true; - description = "Whether to include authentication against LDAP in login PAM"; + description = "Whether to include authentication against LDAP in login PAM."; }; nsswitch = mkOption { type = types.bool; default = true; - description = "Whether to include lookup against LDAP in NSS"; + description = "Whether to include lookup against LDAP in NSS."; }; server = mkOption { @@ -131,7 +127,7 @@ in type = types.lines; description = '' Extra configuration options that will be added verbatim at - the end of the nslcd configuration file (nslcd.conf). + the end of the nslcd configuration file (nslcd.conf(5)). '' ; } ; @@ -182,7 +178,7 @@ in description = '' Specifies the time limit (in seconds) to use when connecting to the directory server. This is distinct from the time limit - specified in users.ldap.timeLimit and affects + specified in and affects the initial server connection only. ''; }; @@ -199,7 +195,7 @@ in actually contact the directory server, and it is possible that a malformed configuration file will trigger reconnection. If soft is specified, then - nss_ldap will return immediately on server + nss_ldap will return immediately on server failure. All hard reconnect policies block with exponential backoff before retrying. ''; @@ -211,10 +207,10 @@ in type = types.lines; description = '' Extra configuration options that will be added verbatim at - the end of the ldap configuration file (ldap.conf). - If users.ldap.daemon is enabled, this + the end of the ldap configuration file (ldap.conf(5)). + If is enabled, this configuration will not be used. In that case, use - users.ldap.daemon.extraConfig instead. + instead. '' ; };