blob: e36ab40f502157b55de9d99b650d53811d7a08df (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
{
config,
...
}:
let
realm = "aristote.mesh";
in
{
# client
security.krb5 = {
enable = true;
settings = {
libdefaults.default_realm = realm;
realms."${realm}" =
let
server = "${config.networking.hostName}.${realm}";
in
{
kdc = server;
admin_server = server;
};
};
};
# server
networking.firewall.allowedTCPPorts = [
88
749
];
services.kerberos_server = {
enable = true;
settings.realms."${realm}" = { };
# initialization procedure
# https://github.com/NixOS/nixpkgs/issues/72722#issuecomment-557658883
# > kdb5_util create -s -r ${realm}
# > systemctl restart kadmind.service kdc.service
};
}
|
