Option "try_first_pass" is not know in version 1.5 despite man example: auth optional pam_mount.so use_first_pass My config is: $ cat /etc/pam.d/system-auth auth required pam_env.so auth required pam_unix.so try_first_pass likeauth nullok auth optional pam_mount.so try_first_pass account required pam_unix.so password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3 password required pam_unix.so try_first_pass use_authtok nullok sha512 shadow session required pam_limits.so session required pam_env.so session optional pam_mount.so session required pam_unix.so session optional pam_permit.so Reproducible: Always
What man page is it that documents try_first_pass? Your quotation mentions use_first_pass, not try_first_pass.
Sorry - my mistake. But changing to ,,use_first_pass'' doesn't solve the problem: Password: pam_mount(pam_mount.c:100): unknown pam_mount option "use_first_pass"
But it works anyway, doesn't it? Pam_mount does indeed use the first pass despite throwing the above error message. I'd speculate that use_first_pass is simply the default behaviour. No need to specify it as an option.
pam_mount has changed lots of options with 1.x, though this is no bug, just the configuration option is deprecated.