|
|
|
@ -70,10 +70,6 @@
|
|
|
|
|
|
|
|
|
|
(define-configuration sssd-configuration
|
|
|
|
|
(sssd (file-like sssd) "sssd package to use")
|
|
|
|
|
(pam-services (list-of-strings (list "su" "sddm" "login" "sshd" "passwd"))
|
|
|
|
|
"list of pam services to configure login for"
|
|
|
|
|
(lambda (a b)
|
|
|
|
|
""))
|
|
|
|
|
(services (list-of-strings (list "nss" "sudo" "pam" "ssh" "ifp"))
|
|
|
|
|
"list of services")
|
|
|
|
|
(domains (list-of-sssd-domain-configurations '())
|
|
|
|
@ -85,9 +81,6 @@
|
|
|
|
|
config)
|
|
|
|
|
"/lib/security/pam_sss.so")))))
|
|
|
|
|
(pam-extension (transformer (lambda (pam)
|
|
|
|
|
(if (member (pam-service-name pam)
|
|
|
|
|
(sssd-configuration-pam-services
|
|
|
|
|
config))
|
|
|
|
|
(pam-service (inherit pam)
|
|
|
|
|
(auth (cons sufficient
|
|
|
|
|
(pam-service-auth
|
|
|
|
@ -100,7 +93,7 @@
|
|
|
|
|
pam)))
|
|
|
|
|
(session (cons sufficient
|
|
|
|
|
(pam-service-session
|
|
|
|
|
pam)))) pam))))))
|
|
|
|
|
pam)))))))))
|
|
|
|
|
|
|
|
|
|
(define (sssd-pam-services config)
|
|
|
|
|
(list (sssd-pam-service config)))
|
|
|
|
|