Proper Way for a PAM Module to Add Groups to a User

[Thorsten Kukuk]

On Mon, Oct 03, Douglas Logan wrote:

> Thorsten,
>        Let me clarify. The PAM module I'm writing authenticates the
> users against an external data source and pulls back a list of remote
> groups. I want groups with those same names to be added to the users.
> 
> Most of the examples I've seen on pam_group seem to be for adding
> certain groups for all users. I don't want things added for all users,
> I want it based on what comes back from my external data store.

pam_group can only add groups to the user who is currently trying to
login. So exactly what you are looking for.

  Thorsten

-- 
Thorsten Kukuk, Senior Architect SLES & Common Code Base
SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany
GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)