pam_oddjob_gpupdate - Man Page

PAM module to update group policy via oddjob


session optional /lib/security/


The module checks if the user exists it invokes the gpupdatefor method of the ru.basealt.oddjob_gpupdate service for the PAM_USER if the module is running with superuser privileges. Otherwise, it ignores.

If D-Bus has not been configured to allow the calling application to invoke these methods provided as part of the ru.basealt.oddjob_gpupdate interface of the / object provided by the ru.basealt.oddjob_gpupdate service, then oddjobd will not receive the request and an error will be returned by D-Bus.

If oddjobd has not been configured to provide these methods, or the user is not authorized to use them, then oddjobd will ignore the module's requests.


The module takes no options.  What oddjobd does in response to the module's request is controlled by the daemon's configuration file, typically /etc/oddjobd.conf.d/oddjobd-gpupdate.conf.

See Also

oddjob_request(1) oddjob.conf(5) oddjobd.conf(5) oddjobd(8)


26 Aug 2019 oddjob Manual