6 commits

Author	SHA1	Message	Date
volth	35d68ef143	treewide: remove redundant quotes	2019-08-26 21:40:19 +00:00
Florian Klink	8817bbefdb	nixos/ldap: set proper User= and Group= for nslcd service ... eb90d97009 broke nslcd, as /run/nslcd was created/chowned as root user, while nslcd wants to do parts as nslcd user. This commit changes the nslcd to run with the proper uid/gid from the start (through User= and Group=), so the RuntimeDirectory has proper permissions, too. In some cases, secrets are baked into nslcd's config file during startup (so we don't want to provide it from the store). This config file is normally hard-wired to /etc/nslcd.conf, but we don't want to use PermissionsStartOnly anymore (#56265), and activation scripts are ugly, so redirect /etc/nslcd.conf to /run/nslcd/nslcd.conf, which now gets provisioned inside ExecStartPre=. This change requires the files referenced to in users.ldap.bind.passwordFile and users.ldap.daemon.rootpwmodpwFile to be readable by the nslcd user (in the non-nslcd case, this was already the case for users.ldap.bind.passwordFile) fixes #57783	2019-03-28 13:08:47 +01:00
Florian Klink	0a1451afe3	nixos/ldap: rename password file options properly ... users.ldap.daemon.rootpwmodpw -> users.ldap.daemon.rootpwmodpwFile users.ldap.bind.password -> users.ldap.bind.passwordFile as users.ldap.daemon.rootpwmodpw never was part of a release, no mkRenamedOptionModule is introduced.	2019-03-27 02:53:56 +01:00
Julien Moutinho	65cfba23af	nixos/tests: test LDAP password changing through nslcd ... NOTE: slapd.conf is deprecated, hence use cn=config.	2019-01-18 05:13:42 +01:00
volth	2e979e8ceb	[bot] nixos/*: remove unused arguments in lambdas	2018-07-20 20:56:59 +00:00
montag451	f0ca6f9290	nixos/tests: add tests for the LDAP stack	2017-05-27 02:51:46 +02:00