[ale] Anybody done fancy reconfiguration of PAM on Fedora

[timothy at meanor.net]

Just add something like this:
session     required      /lib/security/pam_mkhomedir.so skel=/etc/skel/ umask=0022

to /etc/pam.d/system-auth (put it before the "session  required  pam_limits.so" line).

If you don't want it to be overwritten by authconfig, you can always cp system-auth-ac to a different file (say, system-auth-nodelete) and link system-auth to that.  

-Tim

>>
>>Anybody here done any fancy reconfiguration of the PAM subsystem on 
>>Fedora? If you have, I'd love to steal your experience...
>>
>>What I'm looking for is the appropriate place to add a call to 
>>pam_mkhomedir.so in the PAM setup found in Fedora 8. Best I can figure so 
>>far, the candidate locations are in /etc/pam.d/login & /etc/pam.d/gdm or 
>>in /etc/pam.d/system-auth (which is really just a symlink to 
>>/etc/pam.d/system-auth-ac). Using the login & gdm pair means looking after 
>>and remembering two locations of change, and testing both. A pain. 
>>However, system-auth-ac is a target for the authconfig script and therefor 
>>subject to being overwritten. While this is for a personal/family use 
>>machine, I'd like to not break scripts.
>>
>>As for motivation. With all my offspring being largely out of nest, there 
>>is limited opportunity for them to log in here at the house. Still, I 
>>prefer to maintain accounts for them. By using the pam_mkhomedir module, I 
>>hope to be able to let them log in to their accounts without having to 
>>actually maintain the directory system under home for them. I can just 
>>copy the appropriate portions of /etc/passwd, /etc/shadow/, and /etc/group 
>>and be done with it.
>>_______________________________________________
>>Ale mailing list
>>Ale at ale.org
>>http://www.ale.org/mailman/listinfo/ale