nixos/users-groups: do not check validity of empty hashes

4 years ago · 751c2ed6e4
parent 900ae97569
commit 751c2ed6e4
1 changed files with 2 additions and 1 deletions
--- a/nixos/modules/config/users-groups.nix
+++ b/nixos/modules/config/users-groups.nix
@ -629,7 +629,8 @@ in {
          content = "${base64}${sep}${base64}";
          mcf = "^${sep}${scheme}${sep}${content}$";
        in
-        if (user.hashedPassword != null
+        if (user.hashedPassword != null   # login disabled
+            && user.hashedPassword != ""  # login without password
            && builtins.match mcf user.hashedPassword == null)
        then
        ''