A User that is disallowed access to a system still creates a home directory. (4267596)

An account that is denied access either through users.allow or users.deny files is creating a homedir even when not getting access to the system.

This is caused by having create_homedir in the auth section of the pam_vas3.so module, within the systems PAM configuration.

Edit the PAM file and remove the create_homedir from the auth section.

Location of pam config files.
Solaris/HP/AIX - /etc/pam.conf
Suse - /etc/pam.d/common-auth
Redhat -   /etc/pam.d/system-auth

For example, on Suse in /etc/pam.d/system-auth

Change these lines

auth sufficient pam_vas3.so create_homedir get_nonvas_pass
session required pam_vas3.so create_homedir

To look like this
auth sufficient pam_vas3.so get_nonvas_pass
session required pam_vas3.so create_homedir