From 4d1e944543352d2d4ef6670a31789eb817c8eb44 Mon Sep 17 00:00:00 2001
From: Paul Gottschling <paul.gottschling@goteleport.com>
Date: Mon, 8 May 2023 10:17:29 -0400
Subject: [PATCH] Make PAM user creation script copy/pasteable

Closes #18343

The user creation script in our SSH PAM guide is inside a heredoc within
a `code` snippet. The shebang within the script does not render within
the `code` snippet, since the snippet component treats the hash as a
comment.

This change turns the script into a code snippet with a `text` label to
prevent rendering issues and separates commands that are intended to be
run outside the script into their own code snippets.
---
 docs/pages/server-access/guides/ssh-pam.mdx | 19 +++++++++++++++----
 1 file changed, 15 insertions(+), 4 deletions(-)

diff --git a/docs/pages/server-access/guides/ssh-pam.mdx b/docs/pages/server-access/guides/ssh-pam.mdx
index 8bd85caae745b..9a099a88b0971 100644
--- a/docs/pages/server-access/guides/ssh-pam.mdx
+++ b/docs/pages/server-access/guides/ssh-pam.mdx
@@ -208,15 +208,26 @@ session   required   pam_permit.so
 
 Next, create a script that will be run by `pam_exec.so`.
 
+Create a directory where you will store the script:
+
 ```code
-mkdir -p /etc/pam-exec.d
-cat > /etc/pam-exec.d/teleport_acct <<"EOF"
+$ mkdir -p /etc/pam-exec.d
+```
+
+In `/etc/pam-exec.d`, add a file called `teleport_acct` with the following
+content:
+
+```text
 #!/bin/sh
 COMMENT="User ${TELEPORT_LOGIN} for ${TELEPORT_USERNAME} with roles ${TELEPORT_ROLES} created by Teleport."
 /bin/id -u "${TELEPORT_LOGIN}" > /dev/null 2>&1 || /sbin/useradd -m -s /bin/bash -c "${COMMENT}" "${TELEPORT_LOGIN}" 2>> /tmp/pam.error
 exit 0
-EOF
-chmod +x /etc/pam-exec.d/teleport_acct
+```
+
+Ensure that your script is executable:
+
+```code
+$ chmod +x /etc/pam-exec.d/teleport_acct
 ```
 
 This script will check if the login assigned to `TELEPORT_LOGIN` exists and, if