security.pam.ussh.authorizedPrincipals

NixOS option

Comma-separated list of authorized principals to permit; if the user presents a certificate with one of these principals, then they will be authorized. Note that pam-ussh also requires that the certificate contain a principal matching the user’s username. The principals from this list are in addition to those principals. Mutually exclusive with authorizedPrincipalsFile.

type: null or strings concatenated with ","
Default
null
declared in: nixos/modules/security/pam.nixView source on NixOS/nixpkgs →