File bsc1153630-prevent-systemd-from-calling-pam_mount.patch of Package pam_mount
Index: pam_mount-2.16/doc/pam_mount.8.in
===================================================================
--- pam_mount-2.16.orig/doc/pam_mount.8.in
+++ pam_mount-2.16/doc/pam_mount.8.in
@@ -51,7 +51,7 @@ volumes are not allowed by the example p
pam_mount.
.SH PAM configuration
.PP
-In addition, you must include two entries in the system's applicable
+In addition, you must include three entries in the system's applicable
/etc/pam.d/\fIservice\fP config files, as the following example shows:
.IP
.nf
@@ -64,9 +64,12 @@ In addition, you must include two entrie
password required pam_pwdb.so shadow nullok use_authtok
session required pam_pwdb.so
session optional pam_console.so
++++ session [success=1 default=ignore] pam_succeed_if.so service = systemd-user
+++ session optional pam_mount.so
.fi
.PP
+The two lines marked "session" must be kept together!
+.PP
When "sufficient" is used in the second column, you must make sure that
pam_mount is added before this entry. Otherwise pam_mount will not get executed
should a previous PAM module succeed. Also be aware of the "include"
@@ -84,6 +87,7 @@ account sufficient pam_ldap.so
auth required pam_mount.so
auth sufficient pam_ldap.so use_first_pass
auth required pam_unix.so use_first_pass
+session [success=1 default=ignore] pam_succeed_if.so service = systemd-user
session optional pam_mount.so
\(bu\(bu\(bu
.fi