MyNixOS website logo
option

security.pam.ussh.authorizedPrincipals

Comma-separated list of authorized principals to permit; if the user presents a certificate with one of these principals, then they will be authorized.

Note that pam-ussh also requires that the certificate contain a principal matching the user's username. The principals from this list are in addition to those principals.

Mutually exclusive with authorizedPrincipalsFile.

Declarations
Type
null or strings concatenated with ","
Default
null