security.pam.services.sudo_local.touchIdAuth not working

[khsoh]

Hi, this does not seem to be working. I noticed that in /usr/lib/pam folder, the file available is pam_tid.so.2 - is that the root cause of the problem?

[b3nk3]

Edit: my workaround: security.pam.services.sudo_local.text = "auth sufficient pam_tid.so.2";

I'm facing the same issue here. In my pam folder all files have a .2 but the code only targets pam_tid.so etc

https://github.com/LnL7/nix-darwin/blob/master/modules/security/pam.nix#L66

[Enzime]

I only have pam_*.so.2 files in /usr/lib/pam as well, so I don't think that's the issue

Can you try darwin-rebuild switch again?