From ecc2779ce908dfa0edede0d4cc3e5bfa4266daaa Mon Sep 17 00:00:00 2001
From: Jan-Bulthuis <git@bulthuis.dev>
Date: Mon, 9 Jun 2025 03:28:39 +0200
Subject: [PATCH] Made SSSD strict for login in PAM

---
 modules/nixos/domain.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/nixos/domain.nix b/modules/nixos/domain.nix
index 43afd9f..a99d744 100644
--- a/modules/nixos/domain.nix
+++ b/modules/nixos/domain.nix
@@ -110,6 +110,7 @@ in
       after = [ "adcli-join.service" ];
       requires = [ "adcli-join.service" ];
     };
+    security.pam.services.login.sssdStrictAccess = true;
 
     # Set up Sudo
     security.sudo =