Question about pam_mount: excluding users

January Weiner january at uni-muenster.de
Mon Apr 3 11:46:29 UTC 2006


Hi,

I have this pam_mount setup which automatically mounts SMB volumes for
the users authenticaded via LDAP.  I would like to exclude some users
(notably, root) from this procedure -- can this be done? Or should I
write a wrapper script around mount and use it instead of mount?

Right now if the volume can't be mounted (e.g. for the root), I get a
password prompt like this:

pam_mount: error trying to retrieve authtok from auth code
reenter password

this sometimes even happens at boot time when the system su's to a
specific user to initialize some services.  If I understand the matter
correctly, I could remove pam_mount from su.  However, I would like to
have it in su, the reason is as follows: when I use ssh to log in, and
if the pam_mount is in the ssh stack, the volume gets mounted
(correct) but not unmounted upon logout (not correct).  To prevent
this behaviour, I removed pam_mount from ssh, and told the users to
use "su" if they want to mount their volumes when accessing over ssh.

Cheers,
January

--
------------ January Weiner 3  ---------------------+---------------
Division of Bioinformatics, University of Muenster  |  Schloßplatz 4
(+49)(251)8321634                                   |  D48149 Münster
http://www.uni-muenster.de/Biologie.Botanik/ebb/    |  Germany




More information about the Pam-list mailing list