security.pam.ussh.authorizedPrincipalsFile

Path to a list of principals; if the user presents a certificate with one of these principals, then they will be authorized.

Note that pam-ussh also requires that the certificate contain a principal matching the user's username. The principals from this file are in addition to those principals.

Mutually exclusive with authorizedPrincipals.

Type
null or absolute path
Default
null
Declared
<nixpkgs/nixos/modules/security/pam.nix>