Florian Klink 8817bbefdb nixos/ldap: set proper User= and Group= for nslcd service ... eb90d97009 broke nslcd, as /run/nslcd was created/chowned as root user, while nslcd wants to do parts as nslcd user. This commit changes the nslcd to run with the proper uid/gid from the start (through User= and Group=), so the RuntimeDirectory has proper permissions, too. In some cases, secrets are baked into nslcd's config file during startup (so we don't want to provide it from the store). This config file is normally hard-wired to /etc/nslcd.conf, but we don't want to use PermissionsStartOnly anymore (#56265), and activation scripts are ugly, so redirect /etc/nslcd.conf to /run/nslcd/nslcd.conf, which now gets provisioned inside ExecStartPre=. This change requires the files referenced to in users.ldap.bind.passwordFile and users.ldap.daemon.rootpwmodpwFile to be readable by the nslcd user (in the non-nslcd case, this was already the case for users.ldap.bind.passwordFile) fixes #57783		2019-03-28 13:08:47 +01:00
..
fonts	nixos: add preferLocalBuild=true; on derivations for config files	2019-02-22 20:11:27 +01:00
gtk	nixos gtk.iconCache.enable: default from xserver.enable	2018-11-17 11:18:10 +01:00
krb5	nixos: correct improper uses of mkEnableOption, clarify service descriptions	2018-10-05 13:14:45 +07:00
xdg	nixos: add XDG sounds module	2018-12-18 00:32:13 +01:00
appstream.nix	nixos: add AppStream module	2018-12-04 20:26:25 +00:00
debug-info.nix
gnu.nix
i18n.nix	Merge pull request #36424 from jfrankenau/i18n-extra-locale	2018-11-29 16:22:34 +01:00
iproute2.nix
ldap.nix	nixos/ldap: set proper User= and Group= for nslcd service	2019-03-28 13:08:47 +01:00
networking.nix	Revert "resolvconf.conf: Remove forced NSCD service restart"	2018-11-21 15:26:37 +01:00
no-x-libs.nix	nixos/no-x-libs.nix: override pinentry directly	2019-02-27 23:53:50 -05:00
nsswitch.nix	nixos/nsswitch: add option to configure nssHosts	2019-02-22 23:00:24 +01:00
power-management.nix
pulseaudio.nix	nixos/pulseaudio: disable flat-volumes by default	2019-01-27 19:51:26 +00:00
shells-environment.nix	nixos/shells: enable to nullify already defined aliases	2018-10-14 00:14:49 +09:00
swap.nix
sysctl.nix
system-environment.nix
system-path.nix	system-path: set implicitly installed packages to be low-priority	2018-12-26 23:16:17 +09:00
terminfo.nix
timezone.nix
unix-odbc-drivers.nix
update-users-groups.pl
users-groups.nix	lib.makePerlPath -> perlPackages.makePerlPath	2018-12-15 03:50:31 +00:00
vpnc.nix
zram.nix	zram: revert "change default algorithm to zstd" (#56856)	2019-03-07 02:11:20 +02:00