Configure PAM to create a local user if it do not exist already


When the user logs in for the first time, a local POSIX user account is created in /etc/passwd and primary group created in /etc/group, and a local home directory is created in /home.

This is useful on roaming computers when the password is set up to be cached by for example libpam-ccreds or sssd to allow login without network connectivity using the password provided by a network authentication service like Kerberos or LDAP.

Other than the caching mechanisms of libpam-ccreds or libpam-sssd / libnss-sssd, the libpam-mklocaluser approach makes the LDAP accounts more persistent on the roaming workstation and robust again credentials cache deletions and such.

The pam_mklocaluser PAM module additionally allows for execution of additional hook scripts when users log in to such a roaming computer for the first time.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V


Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install libpam-mklocaluser