pam_oddjob_gpupdate - Man Page
PAM module to update group policy via oddjob
Synopsis
session optional /lib/security/pam_oddjob_gpupdate.so
Description
The pam_oddjob_gpupdate.so module checks if the user exists it invokes the gpupdatefor method of the ru.basealt.oddjob_gpupdate service for the PAM_USER if the module is running with superuser privileges. Otherwise, it ignores.
If D-Bus has not been configured to allow the calling application to invoke these methods provided as part of the ru.basealt.oddjob_gpupdate interface of the / object provided by the ru.basealt.oddjob_gpupdate service, then oddjobd will not receive the request and an error will be returned by D-Bus.
If oddjobd has not been configured to provide these methods, or the user is not authorized to use them, then oddjobd will ignore the module's requests.
Options
The module takes no options. What oddjobd does in response to the module's request is controlled by the daemon's configuration file, typically /etc/oddjobd.conf.d/oddjobd-gpupdate.conf.