talexander/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Google Authenticator 2FA support over XRDP

Browse Source
This commit is contained in:
Antonio 2025-05-16 23:24:05 +02:00 committed by D3vil0p3r
parent b3582dc671
commit 8331187976
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
nixos/modules/security/pam.nix
View File

@ -249,6 +249,23 @@ let
to provide Google Authenticator token to log in.
'';
};
allowNullOTP = lib.mkOption {
type = lib.types.bool;
default = false;
description = ''
Whether to allow login for accounts that have no OTP set
(i.e., accounts with no OTP configured or no existing
{file}`~/.google_authenticator`).
'';
};
forwardPass = lib.mkOption {
type = lib.types.bool;
default = false;
description = ''
The authentication provides a single field requiring
the user's password followed by the one-time password (OTP).
'';
};
};
otpwAuth = lib.mkOption {
@ -1048,6 +1065,8 @@ let
modulePath = "${pkgs.google-authenticator}/lib/security/pam_google_authenticator.so";
settings = {
no_increment_hotp = true;
forward_pass = cfg.googleAuthenticator.forwardPass;
nullok = cfg.googleAuthenticator.allowNullOTP;
};
}
{