Red Hat Bugzilla – Bug 212790
pam_mkhomedir not enabled when using network login
Last modified: 2008-01-10 18:21:14 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:188.8.131.52) Gecko/20061011 Fedora/184.108.40.206-7.fc6 Firefox/220.127.116.11
Description of problem:
On a fresh install during the welcome/setup wizard, when setting up a network login, the "pam_mkhomedir" module is not loaded into the "system-auth" file. THis prevents a user from loggin on when using the network login feature.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Install Fedora Normaly
2. Boot for First time
3. Run through setup Wizard
4. Select Network Login Option
5. Select any method and complete it's setup, Windbind for example.
6. Save Changes, exit setup wizard
7. Attempt to login as network user, for example "MSHOME\bob"
An error message appears telling you that the home directory does not exist, offers to log you in with the "/root" home directory. This fails.
Should have automaticly created the home directory in "/home/MSHOME/bob", then login and show the desktop.
To get network login using Winbind to work properly, I had to manualy add in the following line to /etc/pam.d/system-auth:
session required pam_mkhomedir.so skel=/etc/skel umask=0022
and create the following directory:
/home/MSHOME, where "MSHOME" is the netbios name of the windows domain.
I also forgot to mention that this problem has been around since FC 4.
This problem was always there because this is just feature which was not yet
I will consider it for FC 7.
Note: For safe SELinux containment of the login processes the process of making
home directory and copying the /etc/skel should be contained in a different
process -> we need to split the pam_mkhomedir to a module and a helper binary.
*** Bug 250136 has been marked as a duplicate of this bug. ***
*** Bug 334761 has been marked as a duplicate of this bug. ***
Implemented option which adds pam_mkhomedir to /etc/pam.d/system-auth-ac
many thanks Tomas. does that satisfy your point in comment #3?
No, this would require pam_mkhomedir changes which I didn't do yet.