2011-11-11 00:06:24 +01:00
|
|
|
|
{ config, pkgs, ... }:
|
|
|
|
|
|
|
|
|
|
|
|
with pkgs.lib;
|
|
|
|
|
|
|
|
|
|
|
|
{
|
|
|
|
|
|
|
|
|
|
|
|
###### interface
|
|
|
|
|
|
|
|
|
|
|
|
options = {
|
|
|
|
|
|
|
|
|
|
|
|
services.oidentd.enable = mkOption {
|
|
|
|
|
|
default = false;
|
|
|
|
|
|
type = types.bool;
|
|
|
|
|
|
description = ''
|
|
|
|
|
|
Whether to enable ‘oidentd’, an implementation of the Ident
|
|
|
|
|
|
protocol (RFC 1413). It allows remote systems to identify the
|
|
|
|
|
|
name of the user associated with a TCP connection.
|
|
|
|
|
|
'';
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
###### implementation
|
|
|
|
|
|
|
|
|
|
|
|
config = mkIf config.services.oidentd.enable {
|
|
|
|
|
|
|
|
|
|
|
|
jobs.oidentd =
|
|
|
|
|
|
{ startOn = "started network-interfaces";
|
|
|
|
|
|
daemonType = "fork";
|
|
|
|
|
|
exec = "${pkgs.oidentd}/sbin/oidentd -u oidentd -g nogroup";
|
|
|
|
|
|
};
|
|
|
|
|
|
|
2013-08-26 15:20:25 +02:00
|
|
|
|
users.extraUsers.oidentd = {
|
|
|
|
|
|
description = "Ident Protocol daemon user";
|
|
|
|
|
|
group = "oidentd";
|
|
|
|
|
|
uid = config.ids.uids.oidentd;
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
users.extraGroups.oidentd.gid = config.ids.gids.oidentd;
|
2011-11-11 00:06:24 +01:00
|
|
|
|
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
}
|
