Comment 16 for bug 262264

Sorry, I ended up down a rat hole debugging a pam-auth-update bug on my system when trying to work on a patch for this. Please find attached a patch which should switch likewise-open over to using pam-auth-update exclusively on Ubuntu. Unfortunately there's no way to automatically enable/disable a module in the PAM config via pam-auth-update, so instead we ship the module in a configuration that can be non-disruptively enabled by default. If there's a reason that this isn't acceptable, let me know and I'll try to find a different approach (have libdomainjoin invoke pam-auth-update itself for interactive configuration?)