From af4346d4527e2d1a27c038cada58576aec428c48 Mon Sep 17 00:00:00 2001 From: rfjakob Date: Sun, 9 Oct 2016 21:23:17 +0200 Subject: Updated Mounting on login using pam_mount (markdown) --- Mounting-on-login-using-pam_mount.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/Mounting-on-login-using-pam_mount.md b/Mounting-on-login-using-pam_mount.md index d499975..9537af6 100644 --- a/Mounting-on-login-using-pam_mount.md +++ b/Mounting-on-login-using-pam_mount.md @@ -29,8 +29,8 @@ PAM config ---------- An example `/etc/pam.d/sshd` on Fedora 24 is shown below. Basically, pam_mount must be called two times: -1) as the last element in "auth" so it gets the password. -2) as the last element in "session", where it performs the actual mount. + 1. As the last element in "auth" so it gets the password. + 2. As the last element in "session", where it performs the actual mount. ``` #%PAM-1.0 @@ -39,7 +39,9 @@ auth substack password-auth auth include postlogin # Used with polkit to reauthorize users in remote sessions -auth optional pam_reauthorize.so prepare -auth optional pam_mount.so +# vvv insert here # +auth optional pam_mount.so +# ^^^ insert here # account required pam_nologin.so account include password-auth password include password-auth @@ -54,7 +56,9 @@ session include password-auth session include postlogin # Used with polkit to reauthorize users in remote sessions -session optional pam_reauthorize.so prepare +# vvv insert here # session optional pam_mount.so +# ^^^ insert here # ``` Encrypting the whole home directory -- cgit v1.2.3