alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity

nixos/duosec: fix configuration issue with "groups" option

Browse source
This commit is contained in:
Aaron Andersen 2020-01-30 14:16:17 -05:00
parent 109f179e44
commit 28c815e34b
1 changed files with 13 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
nixos/modules/security/duosec.nix
View file

@ -12,7 +12,7 @@ let
ikey=${cfg.ikey} ikey=${cfg.ikey}
skey=${cfg.skey} skey=${cfg.skey}
host=${cfg.host} host=${cfg.host}
${optionalString (cfg.group != "") ("group="+cfg.group)} ${optionalString (cfg.groups != "") ("groups="+cfg.groups)}
failmode=${cfg.failmode} failmode=${cfg.failmode}
pushinfo=${boolToStr cfg.pushinfo} pushinfo=${boolToStr cfg.pushinfo}
autopush=${boolToStr cfg.autopush} autopush=${boolToStr cfg.autopush}
@ -42,6 +42,10 @@ let
}; };
in in
{ {
imports = [
(mkRenamedOptionModule [ "security" "duosec" "group" ] [ "security" "duosec" "groups" ])
];
options = { options = {
security.duosec = { security.duosec = {
ssh.enable = mkOption { ssh.enable = mkOption {
@ -71,10 +75,16 @@ in
description = "Duo API hostname."; description = "Duo API hostname.";
}; };
group = mkOption { groups = mkOption {
type = types.str; type = types.str;
default = ""; default = "";
description = "Use Duo authentication for users only in this group."; example = "users,!wheel,!*admin guests";
description = ''
If specified, Duo authentication is required only for users
whose primary group or supplementary group list matches one
of the space-separated pattern lists. Refer to
<link xlink:href="https://duo.com/docs/duounix"/> for details.
'';
}; };
failmode = mkOption { failmode = mkOption {