···

       
81
       
81
       
 
       
  imports = [

     

       
82
       
82
       
 
       
    (mkAliasOptionModule [ "services" "sshd" "enable" ] [ "services" "openssh" "enable" ])

     

       
83
       
83
       
 
       
    (mkAliasOptionModule [ "services" "openssh" "knownHosts" ] [ "programs" "ssh" "knownHosts" ])

     

       
84
       
84
       
+
       
    (mkRenamedOptionModule [ "services" "openssh" "challengeResponseAuthentication" ] [ "services" "openssh" "kbdInteractiveAuthentication" ])

     

       
84
       
85
       
 
       
  ];

     

       
85
       
86
       
 
       


     

       
86
       
87
       
 
       
  ###### interface

     
···

       
218
       
219
       
 
       
        '';

     

       
219
       
220
       
 
       
      };

     

       
220
       
221
       
 
       


     

       
221
       
221
       
-
       
      challengeResponseAuthentication = mkOption {

     

       
222
       
222
       
+
       
      kbdInteractiveAuthentication = mkOption {

     

       
222
       
223
       
 
       
        type = types.bool;

     

       
223
       
224
       
 
       
        default = true;

     

       
224
       
225
       
 
       
        description = ''

     

       
225
       
225
       
-
       
          Specifies whether challenge/response authentication is allowed.

     

       
226
       
226
       
+
       
          Specifies whether keyboard-interactive authentication is allowed.

     

       
226
       
227
       
 
       
        '';

     

       
227
       
228
       
 
       
      };

     

       
228
       
229
       
 
       


     
···

       
534
       
535
       
 
       
        PermitRootLogin ${cfg.permitRootLogin}

     

       
535
       
536
       
 
       
        GatewayPorts ${cfg.gatewayPorts}

     

       
536
       
537
       
 
       
        PasswordAuthentication ${if cfg.passwordAuthentication then "yes" else "no"}

     

       
537
       
537
       
-
       
        ChallengeResponseAuthentication ${if cfg.challengeResponseAuthentication then "yes" else "no"}

     

       
538
       
538
       
+
       
        KbdInteractiveAuthentication ${if cfg.kbdInteractiveAuthentication then "yes" else "no"}

     

       
538
       
539
       
 
       


     

       
539
       
540
       
 
       
        PrintMotd no # handled by pam_motd

     

       
540
       
541