nixos/sddm + nixos/plasma5: switch PAM service to login.

GDM and LightDM are already using this approach. It also allows us to
enable Kwallet integration more globally without generating stray PAM
services.

The default configuration of login service includes both options sddm
was setting explicitly.
This commit is contained in:
Eduard Bachmakov 2023-02-21 22:48:03 +01:00
parent 2ca5a88f8e
commit 45a6488f9c
2 changed files with 7 additions and 5 deletions

View file

@ -379,7 +379,7 @@ in
security.pam.services.kde = { allowNullPassword = true; };
security.pam.services.sddm.enableKwallet = true;
security.pam.services.login.enableKwallet = true;
systemd.user.services = {
plasma-early-setup = mkIf cfg.runUsingSystemd {

View file

@ -215,10 +215,12 @@ in
};
security.pam.services = {
sddm = {
allowNullPassword = true;
startSession = true;
};
sddm.text = ''
auth substack login
account include login
password substack login
session include login
'';
sddm-greeter.text = ''
auth required pam_succeed_if.so audit quiet_success user = sddm