security.pam.ussh.authorizedPrincipals

Comma-separated list of authorized principals to permit; if the user presents a certificate with one of these principals, then they will be authorized.

Note that pam-ussh also requires that the certificate contain a principal matching the user's username. The principals from this list are in addition to those principals.

Mutually exclusive with authorizedPrincipalsFile.

Type

null or strings concatenated with ","

Default

null

Declared

<nixpkgs/nixos/modules/security/pam.nix>