File non-dynamic-user.patch of Package kanidm
Index: kanidm-1.9.1~git0.36055feca/platform/opensuse/kanidmd.service =================================================================== --- kanidm-1.9.1~git0.36055feca.orig/platform/opensuse/kanidmd.service +++ kanidm-1.9.1~git0.36055feca/platform/opensuse/kanidmd.service @@ -9,7 +9,7 @@ Before=radiusd.service [Service] Type=notify -DynamicUser=yes +User=kanidmd StateDirectory=kanidm StateDirectoryMode=0750 CacheDirectory=kanidmd Index: kanidm-1.9.1~git0.36055feca/examples/server.toml =================================================================== --- kanidm-1.9.1~git0.36055feca.orig/examples/server.toml +++ kanidm-1.9.1~git0.36055feca/examples/server.toml @@ -18,7 +18,7 @@ bindaddress = "[::]:443" # ldapbindaddress = ["[::]:636", "0.0.0.0:636"] # # The path to the kanidm database. -db_path = "/var/lib/private/kanidm/kanidm.db" +db_path = "/var/lib/kanidmd/kanidm.db" # # If you have a known filesystem, kanidm can tune the # database page size to match. Valid choices are: @@ -44,8 +44,8 @@ db_path = "/var/lib/private/kanidm/kanid # TLS chain and key in pem format. Both must be present. # If the server receives a SIGHUP, these files will be # re-read and reloaded if their content is valid. -tls_chain = "/var/lib/private/kanidm/chain.pem" -tls_key = "/var/lib/private/kanidm/key.pem" +tls_chain = "/var/lib/kanidmd/chain.pem" +tls_key = "/var/lib/kanidmd/key.pem" # The path where entry migrations will be read from. # This path should contain files that match the pattern @@ -136,7 +136,7 @@ origin = "https://idm.example.com" [online_backup] # The path to the output folder for online backups -path = "/var/lib/private/kanidm/backups/" +path = "/var/lib/kanidmd/backups/" # The schedule to run online backups (see https://crontab.guru/) # every day at 22:00 UTC (default) schedule = "00 22 * * *"
