nixpkgs/nixos/tests/pam/pam-u2f.nix
novenary fcccfb9e48 nixos/pam/u2f: implement RFC0042
This module has a lot of options, so it's a good candidate for freeform
settings.
2024-07-05 17:07:02 +03:00

30 lines
645 B
Nix

import ../make-test-python.nix ({ ... }:
{
name = "pam-u2f";
nodes.machine =
{ ... }:
{
security.pam.u2f = {
enable = true;
control = "required";
settings = {
cue = true;
debug = true;
interactive = true;
origin = "nixos-test";
# Freeform option
userpresence = 1;
};
};
};
testScript =
''
machine.wait_for_unit("multi-user.target")
machine.succeed(
'egrep "auth required .*/lib/security/pam_u2f.so.*cue.*debug.*interactive.*origin=nixos-test.*userpresence=1" /etc/pam.d/ -R'
)
'';
})