tlaternet/tlaternet-server
1
0
Fork 0
Code Issues 10 Pull requests Activity

fix(pam): Switch to rssh for ssh-agent based PAM auth

Browse source 
The old module stopped working with my new yubikey, so...
This commit is contained in:
Tristan Daniël Maat 2025-10-21 02:18:28 +08:00
parent af4c3bfbcc
commit 71ab2af0e5
Signed by: tlater
GPG key ID: 02E935006CF2E8E7
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
configuration/default.nix
View file

@ -117,11 +117,11 @@
sudo.execWheelOnly = true;
pam = {
sshAgentAuth = {
rssh = {
enable = true;
authorizedKeysFiles = [ "/etc/ssh/authorized_keys.d/%u" ];
settings.auth_key_file = "/etc/ssh/authorized_keys.d/$ruser";
};
services.sudo.sshAgentAuth = true;
services.sudo.rssh = true;
};
};