config.users.ldap: do not include nss module if turned off

2020-09-25 12:03:42 +02:00
parent 1179840f9a
commit a485504740
1 changed files with 2 additions and 2 deletions
@@ -240,9 +240,9 @@ in
      '';
    };

-    system.nssModules = singleton (
+    system.nssModules = mkIf cfg.nsswitch (singleton (
      if cfg.daemon.enable then nss_pam_ldapd else nss_ldap
-    );
+    ));

    system.nssDatabases.group = optional cfg.nsswitch "ldap";
    system.nssDatabases.passwd = optional cfg.nsswitch "ldap";