seang96/nixos-config
1
0
Fork 0
mirror of https://github.com/buckley310/nixos-config.git synced 2024-12-21 19:24:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

update ad-domain for 24.11

Browse source
This commit is contained in:
Sean Buckley 2024-12-09 21:15:07 -05:00
parent f8b61ea795
commit f285547d34
1 changed files with 12 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
modules/ad-domain.nix
View file

@ -62,19 +62,19 @@ in
systemd.services.samba-smbd.enable = lib.mkDefault false;
services.samba = {
enable = true;
enableNmbd = lib.mkDefault false;
enableWinbindd = lib.mkDefault false;
nmbd.enable = lib.mkDefault false;
winbindd.enable = lib.mkDefault false;
package = pkgs.samba4Full;
securityType = "ads";
extraConfig = ''
realm = ${lib.toUpper cfg.longname}
workgroup = ${lib.toUpper cfg.shortname}
client use spnego = yes
restrict anonymous = 2
server signing = mandatory
client signing = mandatory
kerberos method = secrets and keytab
'';
settings.global = {
"security" = "ads";
"realm" = lib.toUpper cfg.longname;
"workgroup" = lib.toUpper cfg.shortname;
"client use spnego" = "yes";
"restrict anonymous" = 2;
"server signing" = "mandatory";
"client signing" = "mandatory";
"kerberos method" = "secrets and keytab";
};
};
};
}