nixos/pam: assemble via the module system

[flokli]

nixos/modules/security/pam.nix contains a huge monolith of pam configuration.

This can be described in a more composable way by using the module system to assemble this configuration file, similar to how it was done with the nss module

While doing this, we'd need to determine a concept on how things should be ordered, taking into account different stages of the authentication process.

Helpful pointers:

• http://www.rjsystems.nl/en/2100-pam-debian.php
• https://manpages.debian.org/stretch/libpam-runtime/pam-auth-update.8.en.html

[rissson]

Is anyone working on this? Or should I get ready to get my hands dirty :D

[flokli]

Please do! :-)

[Rudi9719]

Hey @rissson how are you doing on this? Need a hand?

[rissson]

Hey @rissson how are you doing on this? Need a hand?

I'm afraid I haven't started anything on this :/ My current workaround is overriding the whole module with my requirements. However, if you want to work on this too, maybe we could find a time to meet and throw some ideas and maybe have a basic PoC, which we can then both work on!

[Rudi9719]

I'm not even sure where to begin; but as a former Gentoo user I'm comfortable with modifying PAM files etc. I'm looking to learn the Nix configurations. Are you on Keybase? I can reach out there and we can get this sorted. I'm going to start reading the links from the initial post

[rissson]

Yes, I'm on keybase (risson), but I don't check it often. Feel free to send me an email though, you should be able to find my email in my commits.

[kwohlfahrt]

@rissson I'd be interested in helping here - let me know if you run out of time to work on this or would like help with any part of it.

[rissson]

@kwohlfahrt sure! If I start anything anytime soon, I'll put it in a draft PR and link it here.

[stale]

I marked this as stale due to inactivity. → More info