diff --git a/hosts/vm/collabora/collabora.nix b/hosts/vm/collabora/collabora.nix
index 971ef2e..9956ee1 100644
--- a/hosts/vm/collabora/collabora.nix
+++ b/hosts/vm/collabora/collabora.nix
@@ -50,7 +50,7 @@ in
     # On tente le ldap et on fail sinon.
     auth requisite ${pam_ldap}/pam_ldap.so use_first_pass
     # On vérifie le groupe de l'utilisateur
-    auth require ${pam_modules_path}/pam_listfile.so item=group sense=allow file=${authorizedGroupsFile} onerr=fail
+    auth [success=done new_authtok_reqd=done default=die] ${pam_modules_path}/pam_listfile.so item=group sense=allow file=${authorizedGroupsFile} onerr=fail
 
     # session et password ne sont pas pertinents pour de l'authentification de coolwsd.
   '';