Debian specific system-wide setup
---------------------------------

As pam_ssh honours TMPDIR before spawning ssh-agent, namely
ssh-agent is asked to place its agent file in TMPDIR. pam_tmpdir
from the libpam-tmpdir Debian package can be used to set up TMPDIR
as follows:

  ...
  @include common-session
  session optional pam_tmpdir.so
  session optional pam_ssh.so
  ...

The libpam-ssh Debian package comes with the PAM configuration profile
/usr/share/pam-configs/ssh meant to be used by pam-auth-update(8):
the superuser may want to update or check the pam-auth-update(8) setup
by invoking it; see Debian.NEWS for further details.

 -- Jerome Benoit <calculus@rezozer.net>, Thu, 22 Nov 2013 05:26:17 +0000