MyNixOS website logo
option

security.pam.ussh.enable

Enables Uber's USSH PAM (pam-ussh) module.

This is similar to pam-ssh-agent, except that the presence of a CA-signed SSH key with a valid principal is checked instead.

Note that this module must both be enabled using this option and on a per-PAM-service level as well (using usshAuth).

More information can be found here.

Declarations
Type
boolean
Default
false