Is it possible to do without first creating a user when authorizing through tacacs+?

Question

linux

There is a debian device with the libpam_tacplus package installed.
Authorization occurs only if the user is created on the device itself and on the server (the password is taken from the server).
So, is it possible to configure a takaks client so that a user is created on the device upon a successful authorization attempt.

Answer 1

In other words, do you need to create a home directory if you are authorized? And authorization, as I understand it, you pass?
To do this, you need to connect www.linux-pam.org/Linux-PAM-html/sag-pam_mkhomedir.html
to pam But, there is one thing - this module cannot create nested subdirectories.
For example, if the user has a directory like /mount/homes/office1/leah , then you need to create /mount/homes/office1 and the home directory will be created automatically.