Bonjour
alors voila ma config:
less /etc/pam.d/common-session
#
# /etc/pam.d/common-session - session-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of modules that define tasks to be performed
# at the start and end of sessions of *any* kind (both interactive and
# non-interactive).
#
# As of pam 1.0.1-6, this file is managed by pam-auth-update by default.
# To take advantage of this, it is recommended that you configure any
# local modules either before or after the default block, and use
# pam-auth-update to manage selection of other modules. See
# pam-auth-update(8) for details.
session required pam_mkhomedir.so skel=/etc/skel/ umask=0077
session optional pam_keyinit.so revoke
session required pam_limits.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session [success=1 default=ignore] pam_sss.so
session required pam_unix.so
## here are the per-package modules (the "Primary" block)
#session [default=1] pam_permit.so
## here's the fallback if no module succeeds
#session requisite pam_deny.so
## prime the stack with a positive return value if there isn't one already;
## this avoids us returning an error just because nothing sets a success code
## since the modules above will each just jump around
#session required pam_permit.so
## and here are more per-package modules (the "Additional" block)
#session required pam_unix.so
#session optional pam_ck_connector.so nox11
## end of pam-auth-update config
ensuite
/etc/security # less pam_mount.conf.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE pam_mount SYSTEM "pam_mount.conf.xml.dtd">
<!-- See pam_mount.conf(5) for a description. This should go in /etc/security/ -->
<pam_mount>
<debug enable="0" />
<!-- Volume definitions -->
<volume
fstype="cifs"
server="192.168.1.50"
path="data"
mountpoint="/home/%(USER)/Reseau"
user="*"
options="nodev,nosuid,dir_mode=0700"
/>
<volume
fstype="cifs"
server="192.168.1.50"
path="homes"
mountpoint="/home/%(USER)/ReseauPerso"
user="*"
options="nodev,nosuid,dir_mode=0700"
/>
<!-- pam_mount parameters: General tunables -->
<!--<luserconf name=".pam_mount.conf.xml" />-->
<!-- Note that commenting out mntoptions will give you the defaults.
You will need to explicitly initialize it with the empty string
to reset the defaults to nothing. -->
<mntoptions allow="nosuid,nodev,loop,encryption,nonempty,allow_other,sec,dir_mode,file_mode" />
<mntoptions require="nosuid,nodev,dir_mode" />
<!--
<mntoptions deny="suid,dev" />
<mntoptions allow="*" />
<mntoptions deny="*" />
-->
<logout wait="0" hup="0" term="0" kill="0" />
<!-- pam_mount parameters: Volume-related -->
<mkmountpoint enable="1" remove="true" />
</pam_mount>
avec ça ca fonctionne parfaitement chez moi
PS: au niveau de l’umask j’ai comme valeur 077
http://www.it-connect.fr/gestion-de-lumask-sous-linux/
