This goes into the deb-src package something like this (attached, UNTESTED). git://anonscm.debian.org/collab-maint/libpam-mount.git
I couldn't find docs for the pam-auth-update config format; https://wiki.ubuntu.com/PAMConfigFrameworkSpec is the original blueprint. I couldn't test it experimentally because my pam-mounts aren't authenticated. ☹
>From f4b3f64158e8a65a44c76a97ca5951cba86023b0 Mon Sep 17 00:00:00 2001 From: "Trent W. Buck" <trentb...@gmail.com> Date: Wed, 10 May 2017 10:01:03 +1000 Subject: [PATCH] (EXPERIMENTAL) after expired-password reset, mount with NEW password --- debian/pam-auth-update | 3 +++ 1 file changed, 3 insertions(+) diff --git a/debian/pam-auth-update b/debian/pam-auth-update index 8b509ef..9f251d6 100644 --- a/debian/pam-auth-update +++ b/debian/pam-auth-update @@ -8,3 +8,6 @@ Session-Interactive-Only: yes Session-Type: Additional Session: optional pam_mount.so +Password-Type: Additional +Password: + optional pam_mount.so disable_interactive -- 2.1.4
