How do I make sure that all users have their home directory encrypted when the login for the first time?
I have setup pam to use Kerberos authentication and LDAP authorization (which I think should not really have any effect on ecryptfs).
I have also setup pam-mkhomedir to create the home directories from /etc/skel in which I have placed some standard configurations.
Looking at the .ecryptfs directory in one user account that already has ecryptfs enabled, there are some user-specific configurations, such as the mountpoint (set to /home/d_inevitable) for example, which would be no good in /etc/skel.
Also the configurations in /etc/skel would need to be copied after the home directory has been mounted with ecryptfs.