From 14d4b24cc9b7a7c5e1c12064c2307612f6794081 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sat, 20 Jun 2020 22:35:15 +0200
Subject: ...

---
 ymir.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'ymir.nix')

diff --git a/ymir.nix b/ymir.nix
index 50ae9c01..fa7fabe1 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -313,7 +313,9 @@ in rec {
   };
   security.pam.services."xmpp".text = ''
     auth requisite  pam_succeed_if.so user ingroup xmpp
-    auth required   pam_unix.so audit
+    auth    [success=1 default=ignore]  pam_unix.so obscure sha512 nodelay
+    auth    requisite           pam_deny.so
+    auth    required            pam_permit.so
   '';
   users.groups."shadow" = {
     members = [ "prosody"
-- 
cgit v1.2.3