AUR (en) - kanidm

Git Clone URL:	https://aur.archlinux.org/kanidm.git (read-only, click to copy)
Package Base:	kanidm
Description:	A identity management service and clients.
Upstream URL:	https://github.com/kanidm/kanidm
Keywords:	authentication iam identity identity-management idm ldap oidc radius rust scim security ssh-authentication webauthn
Licenses:	MPL-2.0
Conflicts:	kanidm-git
Submitter:	soloturn
Maintainer:	soloturn (cubi, fossdd, Doridian)
Last Packager:	Doridian
Votes:	7
Popularity:	1.08
First Submitted:	2021-04-02 14:45 (UTC)
Last Updated:	2025-04-19 03:30 (UTC)

Enabled the feature, given tpm2-tss is an indirect dependency of pacman (via gnupg), which means it is required on every Arch system.

//EDIT: Further added clang to makedepends as it is required for this to compile, but not essential for an Arch system

roukoswarf commented on 2025-04-19 03:07 (UTC)

Could this build add support for hardware tpm by default? its in the config example, but will never work due to missing tpm feature.

Can be added to build via --features tpm in cargo build.

boudekerk commented on 2025-04-18 21:20 (UTC)

Indeed an oomkill. Rustc is using close to 4GB, I would have expected that to be plenty.

yaleman commented on 2025-04-17 23:29 (UTC)

sigkill 9 smells like an oomkill (out of memory) event

Doridian commented on 2025-04-17 20:36 (UTC)

SIGKILL is odd. Is there anything in dmesg or any logs about why it got SIGKILL'd?

boudekerk commented on 2025-04-17 20:35 (UTC) (edited on 2025-04-17 20:35 (UTC) by boudekerk)

It looks like it currently doesn't compile on aarch64. The daemon does, but it fails when adding kanidm_tools. Is this a known issue?

```error: could not compilekanidmd_lib` (lib)

Caused by: process didn't exit successfully: rustc --crate-name kanidmd_lib --edition=2021 server/lib/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --diagnostic-width=273 --crate-type lib --emit=dep-info,metadata,link -C opt-level=3 -C linker-plugin-lto -C codegen-units=32 -C debuginfo=2 --cfg 'feature="default"' --check-cfg 'cfg(docsrs,test)' --check-cfg 'cfg(feature, values("default", "dev-oauth2-device-flow", "dhat-ad-hoc", "dhat-heap", "test"))' -C metadata=7df20191c3b732c4 -C extra-filename=-a955192879f1d2b9 --out-dir /tmp/makepkg/kanidm-1.5.0/target/release/deps -L dependency=/tmp/makepkg/kanidm-1.5.0/target/release/deps --extern base64=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libbase64-ed45ab1d52863a78.rmeta --extern base64urlsafedata=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libbase64urlsafedata-99e428d4ca00c2c6.rmeta --extern bitflags=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libbitflags-08533fadd5694da2.rmeta --extern compact_jwt=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libcompact_jwt-d6251915c7e486d1.rmeta --extern concread=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libconcread-bb66d238fb976c98.rmeta --extern dyn_clone=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libdyn_clone-9c54750142c54167.rmeta --extern fernet=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libfernet-e293c85d3ac559d7.rmeta --extern hashbrown=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libhashbrown-abee058c241dfac2.rmeta --extern hex=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libhex-f951dfd5938d1785.rmeta --extern idlset=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libidlset-c9cba744d70b89b8.rmeta --extern image=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libimage-7607da241da72c9a.rmeta --extern itertools=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libitertools-cb5cce017e2ce952.rmeta --extern kanidm_lib_crypto=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libkanidm_lib_crypto-c1e83e57e61352b9.rmeta --extern kanidm_proto=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libkanidm_proto-24bfa953a8f0e1bc.rmeta --extern lazy_static=/tmp/makepkg/kanidm-1.5.0/target/release/deps/liblazy_static-d11cb21fb4139ab6.rmeta --extern ldap3_proto=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libldap3_proto-352a468eb319562b.rmeta --extern lodepng=/tmp/makepkg/kanidm-1.5.0/target/release/deps/liblodepng-088fbf23f66d6f71.rmeta --extern nonempty=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libnonempty-285feb74090da3cb.rmeta --extern num_enum=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libnum_enum-e2f0b75da795d228.rmeta --extern openssl=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libopenssl-177497227aa822c8.rmeta --extern openssl_sys=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libopenssl_sys-7375f2433ef8026a.rmeta --extern rand=/tmp/makepkg/kanidm-1.5.0/target/release/deps/librand-91340bf40f961d69.rmeta --extern regex=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libregex-cf3935195a4faca6.rmeta --extern rusqlite=/tmp/makepkg/kanidm-1.5.0/target/release/deps/librusqlite-39df0c2daebf0883.rmeta --extern serde=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libserde-425e90f6b5668a87.rmeta --extern serde_cbor=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libserde_cbor_2-70695d2edc3d8730.rmeta --extern serde_json=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libserde_json-ba8707821d4e3740.rmeta --extern serde_with=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libserde_with-e9361c3eacc35d90.rmeta --extern sketching=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libsketching-787898f2c8c67654.rmeta --extern smolset=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libsmolset-dd4cabd80ea76f40.rmeta --extern sshkey_attest=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libsshkey_attest-32bd32e4084a2e4d.rmeta --extern svg=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libsvg-7ef5cf2a00c28cf5.rmeta --extern time=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libtime-3dfffd276dece4b9.rmeta --extern tokio=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libtokio-59229dc664a1d3ec.rmeta --extern tracing=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libtracing-2d2c786bf744a413.rmeta --extern url=/tmp/makepkg/kanidm-1.5.0/target/release/deps/liburl-9be3494ec8a5e252.rmeta --extern uuid=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libuuid-592408b982b0a272.rmeta --extern webauthn_rs=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libwebauthn_rs-0287f2bb340b539d.rmeta --extern webauthn_rs_core=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libwebauthn_rs_core-5e748906fca8a4ea.rmeta --extern zxcvbn=/tmp/makepkg/kanidm-1.5.0/target/release/deps/libzxcvbn-f618c1291b99f1b0.rmeta -L native=/tmp/makepkg/kanidm-1.5.0/target/release/build/libsqlite3-sys-9bd5e11ecd2b712f/out --cfg openssl3 (signal: 9, SIGKILL: kill)````

Doridian commented on 2025-04-15 20:28 (UTC) (edited on 2025-04-15 20:58 (UTC) by Doridian)

Just pushed a new version to add the fish completions. I have not used elvis, so I will take my time to make sure I get that part right before I push it out (at least I want to verify things actually work).

Unless another maintainer wants to take this, of course.

//EDIT: It seems elvish does not have a standardized completion directory, yet? See: https://github.com/elves/elvish/issues/1564

notizblock commented on 2025-04-15 18:05 (UTC)

One of the last releases added fish/elvis shell completion support. Could you please also packages those in addition to bash/zsh completions? Thanks!

Doridian commented on 2024-11-16 20:14 (UTC) (edited on 2024-11-16 20:15 (UTC) by Doridian)

On some Linux distributions, there is a group called shadow. This group is the group of /etc/shadow, which on those systems is chmod 640

This is I think mainly to permit unix_chkpwd to verify passwords without being setuid-root (and instead being setgid-shadow). On Arch, unix_chkpwd is setuid+setgid-root and /etc/shadow is chmod 600 and owned by user+group root

Why Arch chose to use setuid-root instead of setgid-shadow, I do not know

soloturn commented on 2024-11-16 20:05 (UTC)

where does shadow come from and what is it for here? resp - why it is different on arch than on others?

Arch Linux User Repository

Search Criteria

Package Details: kanidm 1.5.0-4

Package Actions

Dependencies (7)

Required by (0)

Sources (2)

Latest Comments

Doridian commented on 2025-04-19 03:28 (UTC) (edited on 2025-04-19 03:31 (UTC) by Doridian)