[Gllug] Email Folders

Jason Clifford jason at ukpost.com
Thu Jun 12 09:15:32 UTC 2003


On Wed, 11 Jun 2003, Doug Winter wrote:

> > You are wrong. Access to the shadow password database does require an 
> > extra consideration however that is very easy to fix.
> > 
> > I've been using PAM to authenticate SMTP AUTH for over three years.
> 
> Great - absolutely, this is certainly a better solution.  I'd be
> interested in how you do the authentication against the shadow database.
> 
> The best solution I've seen is a patched pam_unix.so that allows one
> other specific group to authenticate against the shadow password
> database through PAM.  Personally, I consider this to be a pretty evil
> hack itself.

It does seem particularly evil - mostly so because it's a heavy handed 
solution to a simple problem which file permissions can easily handle. By 
creating a dedicated group for shadow file access and granting only that 
group read only access to it the same is achieved in a "standard" way that 
is far easier to maintain.

> > It's not that much extra support - I know as I've been providing it.
> 
> Splendid, I am pleased for you.  Would you care to provide everyone
> elses too? :)

Sure - shall I send details of my commercial support rates? :)

Jason Clifford
-- 
UKFSN.ORG		Finance Free Software while you surf the 'net
http://www.ukfsn.org/			Sign up now


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list