[Freeipa-users] ID-View for AD group to use GECOS umask
Afaik it should be possible to set a users umask by putting something
like "umask=0007" in the GECOS field in combination with pam_umask.so.
pam_umask.so seems to be present on our systems. What I do not know is
in which file (at which exact position) I would have to put "session
optional pam_umask.so".
Should it work in general or would pam_umask.so only respect the GECOS
field of local users?
Cheers,
Ronald