Package: libpam-mklocaluser (0.19)

Configure PAM to create a local user if it does not exist already

When the user logs in for the first time, a local POSIX user account is created in /etc/passwd, a primary group is created in /etc/group, and a local home directory is created in /home.

This is useful on roaming computers when the password is set up to be cached by, for example, libpam-ccreds or sssd to allow login without network connectivity using the password provided by a network authentication service like Kerberos or LDAP.

Other than the caching mechanisms of libpam-ccreds or libpam-sssd / libnss-sssd, the libpam-mklocaluser approach makes the LDAP accounts more persistent on the roaming workstation and robust again credentials cache deletions and such.

The pam_mklocaluser PAM module additionally allows for execution of additional hook scripts when users log in to such a roaming computer for the first time.

This page is also available in the following languages (How to set the default document language):