Package: libpam-modules Version: 0.76-22 If a user's password is changed by root, pam_unix ignores the remember= parameter and the old password hash is not placed in /etc/security/opasswd. Nothing prevents the user from changing their password back to the previous (potentially compromised) value.
-- Brian Ristuccia [EMAIL PROTECTED] [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

