From 1aa9645d7f9c75584424bdf4803d6718fbb2c448 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Wed, 30 Dec 2015 12:17:08 +0200
Subject: [PATCH] pam: Use pam_oddjob_mkhomedir module when SELinux is enabled
 in pam::mkhomedir.

---
 pam/manifests/init.pp | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/pam/manifests/init.pp b/pam/manifests/init.pp
index 57bb1b2..b1d3ab3 100644
--- a/pam/manifests/init.pp
+++ b/pam/manifests/init.pp
@@ -37,6 +37,17 @@ class pam::mkhomedir($umask="0077") {
 
   case $::operatingsystem {
     "centos","redhat","fedora": {
+      if $::selinux {
+        package { "oddjob-mkhomedir":
+          ensure => installed,
+        }
+        service { "oddjobd":
+          ensure  => running,
+          enable  => true,
+          require => Package["oddjob-mkhomedir"],
+          before  => Exec["authconfig --enablemkhomedir --updateall"],
+        }
+      }
       exec { "authconfig --enablemkhomedir --updateall":
         path    => "/bin:/usr/bin:/sbin:/usr/sbin",
         unless  => "egrep '^USEMKHOMEDIR=yes\$' /etc/sysconfig/authconfig",