privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/idm: fix rssh

Browse source
This commit is contained in:
Max Headroom 2024-11-10 13:07:33 +01:00
parent 886ddd9a1a
commit 42627235d1
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
cluster/services/idm/client.nix
View file

@ -1,4 +1,4 @@
{ cluster, config, pkgs, utils, ... }: { cluster, config, lib, pkgs, utils, ... }:
let let
frontendLink = cluster.config.links.idm; frontendLink = cluster.config.links.idm;
@ -39,9 +39,8 @@ in
security = { security = {
pam.services.sudo = { config, ... }: { pam.services.sudo = { config, ... }: {
rules.auth.rssh = { rules.auth.rssh = {
enable = lib.mkForce true;
order = config.rules.auth.unix.order - 10; order = config.rules.auth.unix.order - 10;
control = "sufficient";
modulePath = "${pkgs.pam_rssh}/lib/libpam_rssh.so";
settings = { settings = {
authorized_keys_command = "/etc/ssh/authorized_keys_command_kanidm"; authorized_keys_command = "/etc/ssh/authorized_keys_command_kanidm";
authorized_keys_command_user = "nobody"; authorized_keys_command_user = "nobody";