35 lines
1.4 KiB
Diff
35 lines
1.4 KiB
Diff
|
Index: pam_mount-2.16/doc/pam_mount.8.in
|
||
|
===================================================================
|
||
|
--- pam_mount-2.16.orig/doc/pam_mount.8.in
|
||
|
+++ pam_mount-2.16/doc/pam_mount.8.in
|
||
|
@@ -51,7 +51,7 @@ volumes are not allowed by the example p
|
||
|
pam_mount.
|
||
|
.SH PAM configuration
|
||
|
.PP
|
||
|
-In addition, you must include two entries in the system's applicable
|
||
|
+In addition, you must include three entries in the system's applicable
|
||
|
/etc/pam.d/\fIservice\fP config files, as the following example shows:
|
||
|
.IP
|
||
|
.nf
|
||
|
@@ -64,9 +64,12 @@ In addition, you must include two entrie
|
||
|
password required pam_pwdb.so shadow nullok use_authtok
|
||
|
session required pam_pwdb.so
|
||
|
session optional pam_console.so
|
||
|
++++ session [success=1 default=ignore] pam_succeed_if.so service = systemd-user
|
||
|
+++ session optional pam_mount.so
|
||
|
.fi
|
||
|
.PP
|
||
|
+The two lines marked "session" must be kept together!
|
||
|
+.PP
|
||
|
When "sufficient" is used in the second column, you must make sure that
|
||
|
pam_mount is added before this entry. Otherwise pam_mount will not get executed
|
||
|
should a previous PAM module succeed. Also be aware of the "include"
|
||
|
@@ -84,6 +87,7 @@ account sufficient pam_ldap.so
|
||
|
auth required pam_mount.so
|
||
|
auth sufficient pam_ldap.so use_first_pass
|
||
|
auth required pam_unix.so use_first_pass
|
||
|
+session [success=1 default=ignore] pam_succeed_if.so service = systemd-user
|
||
|
session optional pam_mount.so
|
||
|
\(bu\(bu\(bu
|
||
|
.fi
|