On Monday 10 September 2001 14:17, Lawrence Greenfield wrote:
> Nothing stops you from running pwcheck/saslauthd as a non-root user
> with shadow privileges.

That's good to know. I wouldn't have known from the documentation, 
which only tells me to run it as root. 

I still don't see what using pwcheck buys me over just doing the shadow 
method, however. It's yet another daemon to deal with. And there is 
still the password guessing problem, which calls for a 
restricted-permissions Unix socket. With that, we are back to requiring 
a privileged Cyrus daemon for access to /etc/shadow.

Chris

Reply via email to