From: Matthijs Kooijman <matthijs@stdin.nl>
Date: Wed, 29 Feb 2012 10:32:10 +0000 (+0100)
Subject: pam: Enable pam_mkhomedir for sshd and login.
X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fservers%2Ftika.git;a=commitdiff_plain;h=cf038970495d0447a4f83d14915b10516bec8f9c

pam: Enable pam_mkhomedir for sshd and login.

Note that we don't enable pam_mkhomedir in common-session, since there might be
users (using the maroesjaSystemIdentity objectclass) that cannot login and do
not need a regular homedir.
---

diff --git a/etc/pam.d/common-session b/etc/pam.d/common-session
index 8f4eaa6..be1fadd 100644
--- a/etc/pam.d/common-session
+++ b/etc/pam.d/common-session
@@ -14,5 +14,3 @@ session		required	pam_ldap.so
 
 # Load locale variables
 session		required	pam_env.so envfile=/etc/default/locale
-
-#session	required	pam_mkhomedir.so skel=/etc/skel umask=0022
diff --git a/etc/pam.d/login b/etc/pam.d/login
index 7f15a0f..cc6c2f0 100644
--- a/etc/pam.d/login
+++ b/etc/pam.d/login
@@ -13,6 +13,8 @@
 
 # Print the message of the day upon successful login.
 session		optional	pam_motd.so # [1]
+# Create a homedir for the user, if there is none yet.
+session		optional	pam_mkhomedir.so
 
 # Standard Un*x password updating (not sure if login actually uses this, but
 # well...)
diff --git a/etc/pam.d/sshd b/etc/pam.d/sshd
index adf7c8a..ecb400c 100644
--- a/etc/pam.d/sshd
+++ b/etc/pam.d/sshd
@@ -11,7 +11,8 @@
 
 # Print the message of the day upon successful login.
 session		optional	pam_motd.so
-session 	required	pam_permit.so
+# Create a homedir for the user, if there is none yet.
+session		optional	pam_mkhomedir.so
 
 # Standard Un*x password updating (not sure if OpenSSH actually uses this, but
 # well...)