I solved problem.

First I created global known_hosts file in /etc/ssh/ssh_known_hosts.

Main problem was visible in this line of debug:

command: 'pmt-fd0ssh' 'mount.fuse' 'sshfs#pszubert@HOST:' '/home/pszubert' '-oreconnect,idmap=user,password_stdin,nonempty'

As we can see there is no space between -o and options.

Adding line:

<fusemount>mount.fuse %(VOLUME) %(MNTPT) -o %(OPTIONS)</fusemount>

to pam_mount config file (/etc/security/pam_mount.conf.xml) solved problem. Now mount.fuse is called in tis way this:

command: 'pmt-fd0ssh' 'mount.fuse' 'sshfs#pszubert@HOST:' '/home/pszubert' '-o' 'reconnect,nonempty'

I solved problem.

First I created global known_hosts file in /etc/ssh/ssh_known_hosts.

Main problem was visible in this line of debug:

command: 'pmt-fd0ssh' 'mount.fuse' 'sshfs#pszubert@HOST:' '/home/pszubert' '-oreconnect,idmap=user,password_stdin,nonempty'

As we can see there is no space between -o and options.

Adding line:

<fusemount>mount.fuse %(VOLUME) %(MNTPT) -o %(OPTIONS)</fusemount>

to pam_mount config file (/etc/security/pam_mount.conf.xml) solved problem. Now mount.fuse is called in tis way this:

command: 'pmt-fd0ssh' 'mount.fuse' 'sshfs#pszubert@HOST:' '/home/pszubert' '-o' 'reconnect,nonempty'

Next important things are permissions to /dev/fuse and /usr/bin/fusermount. User should be in fuse group. In my case it wasn't possible because it is remote user so I changed permissions manually:

chmod o+x /usr/bin/fusermount
chmod o+rw /dev/fuse