* Actually use the security.pam.enableSSHAgentAuth option.

http://hydra.nixos.org/build/2698800 svn path=/nixos/trunk/; revision=34483
2012-06-12 20:21:15 +00:00 · 2012-06-12 20:21:15 +00:00 · 63517eca1b
parent 97b81d7e6e
commit 63517eca1b
1 changed files with 1 additions and 1 deletions
--- a/modules/security/pam.nix
+++ b/modules/security/pam.nix
@ -74,7 +74,7 @@ let
          # Authentication management.
          ${optionalString rootOK
              "auth sufficient pam_rootok.so"}
-          ${optionalString sshAgentAuth
+          ${optionalString (config.security.pam.enableSSHAgentAuth && sshAgentAuth)
              "auth sufficient ${pkgs.pam_ssh_agent_auth}/libexec/pam_ssh_agent_auth.so file=~/.ssh/authorized_keys"}
          ${optionalString usbAuth
              "auth sufficient ${pkgs.pam_usb}/lib/security/pam_usb.so"}