Add oddjob mkhomedir option rhel pam (#675)

* added support for oddjob mkhomedir via optional var * optimized conditional * added variable description Signed-off-by: Jochen Demmer <[email protected]> * added support for oddjob mkhomedir via optional var Signed-off-by: Jochen Demmer <[email protected]> * optimized conditional Signed-off-by: Jochen Demmer <[email protected]> * added variable description Signed-off-by: Jochen Demmer <[email protected]> --------- Signed-off-by: Jochen Demmer <[email protected]> Co-authored-by: Jochen Demmer <[email protected]>
2023-05-23 11:19:40 +02:00
1 parent c597eb97b2
commit f3337f33b3
@@ -47,6 +47,9 @@ password    required      pam_deny.so
 session     optional      pam_keyinit.so revoke
 session     required      pam_limits.so
 -session    optional      pam_systemd.so
+{% if (os_auth_pam_oddjob_mkhomedir | bool) %}
+session     optional      pam_oddjob_mkhomedir.so umask=0077
+{% endif %}
 session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
 session     required      pam_unix.so
 {% if (os_auth_pam_sssd_enable | bool) %}