From 78de8b6fe5f1e44d8b41bae025136d7f1dbf7929 Mon Sep 17 00:00:00 2001
From: "Brideau, Patrick" <patrick.brideau@teluq.ca>
Date: Fri, 13 Feb 2026 11:15:28 -0500
Subject: [PATCH 1/2] feat: add AuthPamService to directory template

---
 templates/vhost/_directories.erb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/templates/vhost/_directories.erb b/templates/vhost/_directories.erb
index 60b7eb917..862ef5d18 100644
--- a/templates/vhost/_directories.erb
+++ b/templates/vhost/_directories.erb
@@ -350,6 +350,9 @@
     <%- if directory['auth_ldap_sub_group_class'] -%>
     AuthLDAPSubGroupClass <%= directory['auth_ldap_sub_group_class'] %>
     <%- end -%>
+    <%- if directory['auth_pam_service'] -%>
+    AuthPAMService <%= directory['auth_pam_service'] %>
+    <%- end -%>
     <%- if directory['fallbackresource'] -%>
     FallbackResource <%= directory['fallbackresource'] %>
     <%- end -%>

From 21e8762d70909306bd6f22a0e1c3cf84d4a8333c Mon Sep 17 00:00:00 2001
From: "Brideau, Patrick" <patrick.brideau@teluq.ca>
Date: Fri, 13 Feb 2026 12:18:01 -0500
Subject: [PATCH 2/2] test: add auth_pam_service directory

---
 spec/defines/vhost_spec.rb | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/spec/defines/vhost_spec.rb b/spec/defines/vhost_spec.rb
index 355c20741..41180ac6a 100644
--- a/spec/defines/vhost_spec.rb
+++ b/spec/defines/vhost_spec.rb
@@ -317,6 +317,15 @@
                   'mellon_cond' => ['isMemberOf "cn=example-access,ou=Groups,o=example,o=com" [MAP]'],
                   'mellon_session_length' => '300'
                 },
+                {
+                  'path' => '/secure-pam',
+                  'provider' => 'location',
+                  'auth_type' => 'Basic',
+                  'auth_basic_provider' => 'PAM',
+                  'auth_name' => 'my pam authentication',
+                  'require' => 'valid-user',
+                  'auth_pam_service' => 'my-pam-config',
+                },
                 {
                   'path' => '/secure',
                   'provider' => 'location',
@@ -760,6 +769,7 @@
               .with_content(%r{^\s+MellonUser\s"urn:oid:0\.9\.2342\.19200300\.100\.1\.1"$})
               .with_content(%r{^\s+MellonCond\sisMemberOf\s"cn=example-access,ou=Groups,o=example,o=com"\s\[MAP\]$})
               .with_content(%r{^\s+MellonSessionLength\s"300"$})
+              .with_content(%r{^\s+AuthPAMService\smy-pam-config$})
           }
           # rubocop:enable RSpec/ExampleLength