From: Peter Palfrader <peter@palfrader.org>
Date: Mon, 23 Apr 2012 16:09:18 +0000 (+0200)
Subject: Do not run pam_mkhomedir if your homedir is /nonexistent
X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;h=f642cf440bffdf0ad80b883b088076fce024ce4d;p=dsa-puppet.git

Do not run pam_mkhomedir if your homedir is /nonexistent
---

diff --git a/modules/debian-org/templates/pam.common-session.erb b/modules/debian-org/templates/pam.common-session.erb
index 07c4fdf0..1d027ec1 100644
--- a/modules/debian-org/templates/pam.common-session.erb
+++ b/modules/debian-org/templates/pam.common-session.erb
@@ -29,7 +29,9 @@ session	required			pam_permit.so
 # and here are more per-package modules (the "Additional" block)
 session	required	pam_unix.so 
 # end of pam-auth-update config
-session	optional	pam_mkhomedir.so skel=/etc/skel umask=0022
+session	[success=1 default=ignore]	pam_succeed_if.so home = /nonexistent
+session	optional			pam_mkhomedir.so skel=/etc/skel umask=0022
+session	optional			pam_permit.so
 <% else %>
 #
 # /etc/pam.d/common-session - session-related modules common to all services