Projects / pam_mount module

pam_mount module

pam_mount is a Pluggable Authentication Module that can mount volumes for a user session upon login, using the same passwords as for login. It supports any filesystem your kernel is capable of, including FUSE, SMB/CIFS, various crypto types, and more.

Operating Systems

Recent releases

  •  28 Aug 2013 06:18

    Release Notes: An "allow_discard" option was added to support an extra case of FSTRIM support. The config file now allows the user to specify user/group names by regex.

    •  15 Dec 2011 12:27

      Release Notes: This release restores keyfile support for non-crypto mounts. A new cryptmount library is shipped that contains the code shared among pam_mount and its utilities. libmount from util-linux 2.20 is now utilized in part as well.

      •  06 Oct 2011 12:59

        Release Notes: This release restores support in mount.crypt for files >= 4 GB.

        •  07 Aug 2011 00:16

          Release Notes: Networked volumes do not require a "server" attribute anymore, which allows integration with pam_winbind and Active Directory. Multiple diagnostics were added to umount.crypt to help determine details of potential failures.

          •  15 Apr 2011 19:19

            Release Notes: This release adds a retry sequence for unloading loop devices. More graceful handling for systems with read-only mtab was put in place.

            Recent comments

            02 Mar 2004 13:38 crippler

            sounds good on paper...
            ...but the documentation is a bit thin, so it's hard to get working on popular distributions like Red Hat Linux 9 or RHEL 3.

            The example PAM configs don't seem to help. Even with debug on, I'm not getting anything in /var/log/messages to help.

            If I can get this to work as advertised I'll be in nirvana. Right now I'm stuck a bit south of that place in the land that PAM built.

            23 Jun 2003 13:28 pjreed

            I'm working for a company that is trying to migrant our workstations from Windows to Linux, and this is exactly the sort of thing we needed.

            There's one feature that would be nice, though, that doesn't seem to be possible; as it is right now, it's possible to set the gid on shares to the user's name, but that's only useful if every user has their own group. Instead, would it be possible to set the gid to the user's main group? We have about 100 users and around 5 main groups, so that would be very nice.

            Nonetheless, excellent job!

            30 Jul 2002 11:16 boost

            Good thinking
            Now this should help a lot of ISPs with shell accounts or linux desktops in a network.

            Great job!


            Project Spotlight


            A Fluent OpenStack client API for Java.


            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.