Chapter 6. Enabling Custom Home Directories Using authconfig

Apply the correct SELinux context and permissions from the /home directory to the home directory that is created on the local system. For example:

Install the oddjob-mkhomedir package on the system.

This package provides the pam_oddjob_mkhomedir.so library, which the authconfig command uses to create home directories. The pam_oddjob_mkhomedir.so library, unlike the default pam_mkhomedir.so library, can create SELinux labels.

The authconfig command automatically uses the pam_oddjob_mkhomedir.so library if it is available. Otherwise, it will default to using pam_mkhomedir.so.

Make sure the oddjobd service is running.

Run the authconfig command and enable home directories. In the command line, this is done through the --enablemkhomedir option.

authconfig --enablemkhomedir --update

[root@server ~]# authconfig --enablemkhomedir --update

In the UI, there is an option in the Advanced Options tab (Create home directories on the first login) to create a home directory automatically the first time that a user logs in.

This option is beneficial with accounts that are managed centrally, such as with LDAP. However, this option should not be selected if a system like automount is used to manage user home directories.