Hoping this is the right place to ask this question. I'm having trouble understanding if/how the setting auth-pam-sessions-close=1 works. Specifically, I have network drives mounted by pam_mount, but they are not being unmounted on logout. (This works fine for, say, an ssh login.)
I've seen the warnings about using this approach, but I'd like to understand if it works at all. In the documentation at https://docs.posit.co/ide/server-pro/admin/access_and_security/pam_sessions.html I've read
IDE sessions do not respect this setting when the Job Launcher is enabled. Only the user’s home page closes its PAM session.
This seems to indicate to me that logging off from the launcher will trigger PAM close behavior, but drives don't get unmounted then. I've also tried running with launcher-sessions-enabled=0 so that, presumably, IDE sessions will respect this setting, but haven't seen success there either.
I can post my own config files, but I guess I'm wondering what a minimal config example would be where this setting would result in what I think is the expected PAM close behavior.
Otherwise, is there an accepted way to clean up mounted network drives?