ask has been compiled with usergroups enabled by default and you want to disable it at runtime.

umask=mask

Sets the calling process's file mode creation mask (umask) to mask & 0777. The value is interpreted as Octal.

6.38.3. MODULE TYPES PROVIDED

Only the session type is provided.

6.38.4. RETURN VALUES

PAM_SUCCESS

The new umask was set successfully.

PAM_BUF_ERR

Memory buffer error.

PAM_CONV_ERR

The conversation method supplied by the application failed to obtain the username.

PAM_INCOMPLETE

The conversation method supplied by the application returned PAM_CONV_AGAIN.

PAM_SERVICE_ERR

No username was given.

PAM_USER_UNKNOWN

User not known.

6.38.5. EXAMPLES

Add the following line to /etc/pam.d/login to set the user specific umask at login:

        session optional pam_umask.so umask=0022
      

6.38.6. AUTHOR

pam_umask was written by Thorsten Kukuk <kukuk@thkukuk.de>.