pam_oddjob_gpupdate(8)

📦
version 0.2.1 · 2 versions
, in fedora 43, fedora 44

💖 pam_oddjob_gpupdate(8) 💖

okay bestie, buckle up, this is a System Manager's Manual page and it's literally about the PAM module pam_oddjob_gpupdate.so — yes, the whole thing, we're doing it ✨

✨ NAME ✨

pam_oddjob_gpupdate.so — the PAM module that updates group policy via oddjob 🎀

🌸 SYNOPSIS 🌸

session optional /lib/security/pam_oddjob_gpupdate.so

that's it. that's the whole synopsis. session, optional, path, done. iconic behavior honestly 💅

🦋 DESCRIPTION 🦋

so here's the tea ☕ — pam_oddjob_gpupdate.so checks if the user exists, and if it does, it invokes the gpupdatefor method of the ru.basealt.oddjob_gpupdate service for the PAM_USER — but only if the module is running with superuser privileges. otherwise? it just ignores. no drama, no fuss, it minds its own business 🙈

now, plot twist 😭 — if D-Bus hasn't been configured to let the calling application invoke these methods (the ones provided as part of the ru.basealt.oddjob_gpupdate interface of the / object provided by the ru.basealt.oddjob_gpupdate service), then oddjobd will not receive the request, and an error will be returned by D-Bus. so like, the message just never lands. 💀

and if oddjobd hasn't been configured to provide these methods, or the user isn't authorized to use them, then oddjobd will straight up ignore the module's requests. ghosted. 🫶

🎀 OPTIONS 🎀

the module takes no options. zero. none. not a single flag, bestie. 😌

what oddjobd actually does in response to the module's request is controlled by the daemon's configuration file, typically /etc/oddjobd.conf.d/oddjobd-gpupdate.conf. so if you're looking for the knobs to turn, they're over there, not here 👑

🌈 SEE ALSO 🌈

no cap: the vibes here are "quietly do the group policy thing and log off," and honestly? respect. 💜

and that's the whole page, bestie!! this little gem came from the oddjob Manual, dated 26 Aug 2019 — so go forth, configure your oddjobd, and slay ✨🦋💖

📦 where this page comes from