security.pam.ussh.enable

Enables Uber's USSH PAM (pam-ussh) module.

This is similar to pam-ssh-agent, except that the presence of a CA-signed SSH key with a valid principal is checked instead.

Note that this module must both be enabled using this option and on a per-PAM-service level as well (using usshAuth).

More information can be found here.

Type

boolean

Default

false

Declared

<nixpkgs/nixos/modules/security/pam.nix>