further pam trial and error

1 files changed, 4 insertions, 4 deletions

diff --git a/ymir.nix b/ymir.nix
index 2e0d2ea3..c3865580 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -115,10 +115,10 @@ in {
     };
   };
   security.pam.services."xmpp".text = ''
-    auth required   pam_warn.so audit
-    auth required   pam_succeed_if.so user ingroup xmpp audit
-    auth sufficient pam_unix.so try_first_pass audit
-    auth required   pam_deny.so audit
+    auth optional   pam_warn.so
+    auth requisite  pam_succeed_if.so user ingroup xmpp
+    auth sufficient pam_unix.so audit
+    auth required   pam_deny.so
   '';
   users.groups."xmpp" = {
     members = [ "gkleen"