update ad-domain for 24.11

This commit is contained in:
Sean Buckley 2024-12-09 21:15:07 -05:00
parent f8b61ea795
commit f285547d34

View file

@ -62,19 +62,19 @@ in
systemd.services.samba-smbd.enable = lib.mkDefault false; systemd.services.samba-smbd.enable = lib.mkDefault false;
services.samba = { services.samba = {
enable = true; enable = true;
enableNmbd = lib.mkDefault false; nmbd.enable = lib.mkDefault false;
enableWinbindd = lib.mkDefault false; winbindd.enable = lib.mkDefault false;
package = pkgs.samba4Full; package = pkgs.samba4Full;
securityType = "ads"; settings.global = {
extraConfig = '' "security" = "ads";
realm = ${lib.toUpper cfg.longname} "realm" = lib.toUpper cfg.longname;
workgroup = ${lib.toUpper cfg.shortname} "workgroup" = lib.toUpper cfg.shortname;
client use spnego = yes "client use spnego" = "yes";
restrict anonymous = 2 "restrict anonymous" = 2;
server signing = mandatory "server signing" = "mandatory";
client signing = mandatory "client signing" = "mandatory";
kerberos method = secrets and keytab "kerberos method" = "secrets and keytab";
''; };
}; };
}; };
} }