Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

[GOMBAS Gabor]

On Thu, Dec 28, 2000 at 02:45:22PM -0500, Todd Nemanich wrote:

> I'm not exactly sure if this is the reason, but PAM does not allow any
> user except root to check another user's password.

Not true. Any user can use PAM to check any password _if_ that user has
access to the database containing the secrets. When using /etc/passwd and
/etc/shadow, you must be root or in the shadow group. It's nothing to do
with PAM, it's the basic UNIX permission thing. Solution: add the cyrus
user to the shadow group.

Gabor

-- 
Gabor Gombas                                       Eotvos Lorand University
E-mail: [EMAIL PROTECTED]                        Hungary