File bsc1153630-prevent-systemd-from-calling-pam_mou... of Package pam_mount

Overview Repositories Revisions Requests Users Attributes Meta

File bsc1153630-prevent-systemd-from-calling-pam_mount.patch of Package pam_mount (Revision db9d70df030e14d8d13a997dd66be154)

Currently displaying revision db9d70df030e14d8d13a997dd66be154 , Show latest

Index: pam_mount-2.16/doc/pam_mount.8.in
===================================================================
--- pam_mount-2.16.orig/doc/pam_mount.8.in
+++ pam_mount-2.16/doc/pam_mount.8.in
@@ -51,7 +51,7 @@ volumes are not allowed by the example p
 pam_mount.
 .SH PAM configuration
 .PP
-In addition, you must include two entries in the system's applicable
+In addition, you must include three entries in the system's applicable
 /etc/pam.d/\fIservice\fP config files, as the following example shows:
 .IP
 .nf
@@ -64,9 +64,12 @@ In addition, you must include two entrie
     password required  pam_pwdb.so shadow nullok use_authtok
     session  required  pam_pwdb.so
     session  optional  pam_console.so
++++ session [success=1 default=ignore] pam_succeed_if.so service = systemd-user
 +++ session  optional  pam_mount.so
 .fi
 .PP
+The two lines marked "session" must be kept together!
+.PP
 When "sufficient" is used in the second column, you must make sure that
 pam_mount is added before this entry. Otherwise pam_mount will not get executed
 should a previous PAM module succeed. Also be aware of the "include"
@@ -84,6 +87,7 @@ account sufficient  pam_ldap.so
 auth    required    pam_mount.so
 auth    sufficient  pam_ldap.so use_first_pass
 auth    required    pam_unix.so use_first_pass
+session [success=1 default=ignore] pam_succeed_if.so service = systemd-user
 session optional    pam_mount.so
 \(bu\(bu\(bu
 .fi

Places

File bsc1153630-prevent-systemd-from-calling-pam_mount.patch of Package pam_mount (Revision db9d70df030e14d8d13a997dd66be154)

Places