movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-14 06:00:33 +03:00
Code Activity

nixos/pam: add Google Authenticator 2FA support over XRDP

Browse source 
(cherry picked from commit 8331187976)
This commit is contained in:
Antonio 2025-05-16 23:24:05 +02:00 • committed by Gaetan Lepage
parent 7548b2f7ee
commit f0a47fd2a3
1 changed files with 19 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
nixos/modules/security/pam.nix
View file

@ -249,6 +249,23 @@ let
to provide Google Authenticator token to log in.
'';
};
allowNullOTP = lib.mkOption {
type = lib.types.bool;
default = false;
description = ''
Whether to allow login for accounts that have no OTP set
(i.e., accounts with no OTP configured or no existing
{file}`~/.google_authenticator`).
'';
};
forwardPass = lib.mkOption {
type = lib.types.bool;
default = false;
description = ''
The authentication provides a single field requiring
the user's password followed by the one-time password (OTP).
'';
};
};
otpwAuth = lib.mkOption {
@ -1048,6 +1065,8 @@ let
modulePath = "${pkgs.google-authenticator}/lib/security/pam_google_authenticator.so";
settings = {
no_increment_hotp = true;
forward_pass = cfg.googleAuthenticator.forwardPass;
nullok = cfg.googleAuthenticator.allowNullOTP;
};
}
{