@@ -26,7 +26,6 @@ let
2626 [global]
2727 security = ${cfg.securityType}
2828 passwd program = /run/wrappers/bin/passwd %u
29− pam password change = ${smbToString cfg.syncPasswordsByPam}
3029 invalid users = ${smbToString cfg.invalidUsers}
3130
3231 ${cfg.extraConfig}
@@ -67,6 +66,7 @@ in
6766{
6867 imports = [
6968 (mkRemovedOptionModule [ "services" "samba" "defaultShare" ] "")
69+ (mkRemovedOptionModule [ "services" "samba" "syncPasswordsByPam" ] "This option has been removed by upstream, see https://bugzilla.samba.org/show_bug.cgi?id=10669#c10")
7070 ];
7171
7272 ###### interface
@@ -124,18 +124,6 @@ in
124124 '';
125125 };
126126
127− syncPasswordsByPam = mkOption {
128− type = types.bool;
129− default = false;
130− description = ''
131− Enabling this will add a line directly after pam_unix.so.
132− Whenever a password is changed the samba password will be updated as well.
133− However, you still have to add the samba password once, using smbpasswd -a user.
134− If you don't want to maintain an extra password database, you still can send plain text
135− passwords which is not secure.
136− '';
137− };
138−
139127 invalidUsers = mkOption {
140128 type = types.listOf types.str;
141129 default = [ "root" ];