MetzNet
/
metznet-channel
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Simplified krb5 config

master
noah metz 2023-11-21 20:57:51 -07:00
parent 3722bb85f0
commit 98a93735b3
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
system/base-system.scm
Unescape Escape View File

@ -56,6 +56,7 @@
(define %domain-name "metznet.ca") (define %domain-name "metznet.ca")
(define %domain-kadmin (string-append "kerberos." %domain-name)) (define %domain-kadmin (string-append "kerberos." %domain-name))
(define %domain-kdc (string-append "kerberos." %domain-name)) (define %domain-kdc (string-append "kerberos." %domain-name))
(define %metznet-base-user-accounts (append (list (define %metznet-base-user-accounts (append (list
@ -89,14 +90,14 @@
(program #~(string-append #$openresolv "/sbin/resolvconf")))) (program #~(string-append #$openresolv "/sbin/resolvconf"))))
%setuid-programs)) %setuid-programs))
(define (krb5-config kdc-server kadmin) (krb5-configuration (define %metznet-krb5-config (krb5-configuration
(default-realm %domain-realm) (default-realm %domain-realm)
(allow-weak-crypto? #t) (allow-weak-crypto? #t)
(rdns? #f) (rdns? #f)
(realms (list (krb5-realm (realms (list (krb5-realm
(name %domain-realm) (name %domain-realm)
(admin-server kadmin) (admin-server %domain-kadmin)
(kdc kdc-server)))))) (kdc %domain-kdc))))))
(define pam-krb5-config (pam-krb5-configuration (define pam-krb5-config (pam-krb5-configuration
(pam-krb5 pam-krb5) (pam-krb5 pam-krb5)
@ -135,7 +136,7 @@
(define %metznet-desktop-services (define %metznet-desktop-services
(append (list (service openssh-service-type) (append (list (service openssh-service-type)
(service krb5-service-type (krb5-config %domain-kdc %domain-kadmin)) (service krb5-service-type %metznet-krb5-config)
(service pam-krb5-service-type pam-krb5-config) (service pam-krb5-service-type pam-krb5-config)
(service nslcd-service-type (nslcd-configuration (base "dc=metznet,dc=ca") (service nslcd-service-type (nslcd-configuration (base "dc=metznet,dc=ca")
(nss-pam-ldapd nss-pam-ldapd) (nss-pam-ldapd nss-pam-ldapd)
@ -171,7 +172,7 @@
(define %metznet-server-services (append (list (define %metznet-server-services (append (list
(service openssh-service-type) (service openssh-service-type)
(service krb5-service-type (krb5-config %domain-kdc %domain-kadmin)) (service krb5-service-type %metznet-krb5-config)
(service pam-krb5-service-type pam-krb5-config) (service pam-krb5-service-type pam-krb5-config)
(service dhcp-client-service-type) (service dhcp-client-service-type)
(openvpn-client-service (openvpn-client-service