Also facing this issue, it's weird that newer pam-auth-update also ignores default option in pam configs. So now it's not possible to non-interactively enable new profile (but it was working in trusty). Here's updated script to add one profile (mkhomedir) to current set of profiles:
#!/bin/sh PROFILES=$(debconf-get-selections | grep libpam-runtime/profiles | cut -d ' ' -f 2- | sed s/\,\ mkhomedir//g) PROFILES="${PROFILES}, mkhomedir" for profile in /usr/share/pam-configs/*; do profile_name=$(grep Name: $profile | cut -d ' ' -f 2-) PROFILES=$(echo $PROFILES | sed s,$(basename $profile),"${profile_name}",g) done cat > $1 <<EOF libpam-runtime/profiles="${PROFILES}" EOF -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to pam in Ubuntu. https://bugs.launchpad.net/bugs/682662 Title: pam-auth-update ignores debconf settings Status in pam package in Ubuntu: Triaged Status in pam package in Debian: Won't Fix Bug description: pam-auth-update ignores the current debconf-settings. This makes it impossible to do automatically configure pam in noninteractive installations. Demonstration: ~ # debconf-get-selections | grep libpam-runtime libpam-runtime libpam-runtime/override boolean true libpam-runtime libpam-runtime/conflicts error libpam-runtime libpam-runtime/no_profiles_chosen error libpam-runtime libpam-runtime/profiles multiselect krb5, unix, ldap, tmpdir, gnome-keyring, consolekit libpam-runtime libpam-runtime/you-had-no-auth error ~ # DEBIAN_FRONTEND=noninteractive pam-auth-update ~ # debconf-get-selections | grep libpam-runtime libpam-runtime libpam-runtime/override boolean false libpam-runtime libpam-runtime/conflicts error libpam-runtime libpam-runtime/no_profiles_chosen error libpam-runtime libpam-runtime/profiles multiselect krb5, unix, winbind, ldap libpam-runtime libpam-runtime/you-had-no-auth error To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/682662/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp