Re: [PATCH 2/3] gnu: pam_unix.so Add use_first_pass option.

[Leo Famulari <leo@famulari.name>]

On Sat, Oct 22, 2016 at 05:27:59PM +0200, John Darrington wrote:
> * gnu/system/pam.scm (unix-pam-service) [auth]: Add "use_first_pass" option.
> ---
>  gnu/system/pam.scm | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/gnu/system/pam.scm b/gnu/system/pam.scm
> index 4546c1a..0278db6 100644
> --- a/gnu/system/pam.scm
> +++ b/gnu/system/pam.scm
> @@ -217,7 +217,7 @@ should be a file-like object used as the message-of-the-day."
>                           (pam-entry
>                            (control "required")
>                            (module "pam_unix.so")
> -                          (arguments '("nullok")))
> +                          (arguments '("nullok" "use_first_pass")))

pam_unix(8) says:

use_first_pass
    The argument use_first_pass forces the module to use a previous stacked modules
    password and will never prompt the user - if no password is available or the
    password is not appropriate, the user will be denied access.

I don't understand exactly what this means for GuixSD. Can you explain
it to us? :)