Zurück
-
Titel
A User that is disallowed access to a system still creates a home directory. -
Beschreibung
An account that is denied access either through users.allow or users.deny files is creating a homedir even when not getting access to the system.
-
Ursache
This is caused by having create_homedir in the auth section of the pam_vas3.so module, within the systems PAM configuration.
-
Lösung
Edit the PAM file and remove the create_homedir from the auth section.
Location of pam config files.
Solaris/HP/AIX - /etc/pam.conf
Suse - /etc/pam.d/common-auth
Redhat - /etc/pam.d/system-auth
For example, on Suse in /etc/pam.d/system-auth
Change these lines
auth sufficient pam_vas3.so create_homedir get_nonvas_pass
session required pam_vas3.so create_homedir
To look like this
auth sufficient pam_vas3.so get_nonvas_pass
session required pam_vas3.so create_homedir