I am trying to implement on-demand creation of user accounts on individual machines. I have successfully created a PAM module that will authenticate against my database. There is also a field in the database that indicates which machines the user is allowed to log in to. Login is via SSH and the machines are all running RedHat 7.3.
I had thought I could do this either in my custom module or in pam_mkhomedir. The problem is that if the account does not already exist soemthing seems to reject the request before it attempts to authenticate. I only see this in /var/log/secure: Failed password for illegal user XXXX from X.X.X.X port XXXX and nothing in /var/log/messages.
Can PAM modules create user accounts?
Bryan
_______________________________________________ Pam-list@xxxxxxxxxx https://listman.redhat.com/mailman/listinfo/pam-list