On Fri, 2011-04-29 at 10:55 -0400, Jonathan Siegle wrote:
> Is it possible to allow master users to be authenticated against PAM?
> Something like:
>
> passdb {
> driver = pam
> master = yes
> }
If PAM authentication succeeds, the user is a master user with this
config.
> and then have a userdb which qualifies what accounts are master accounts but
> doesn't have passwords?
Do you mean you would want both master and non-master users be
authenticated from a single PAM passdb? That won't work, you need
separate passdbs. You could probably configure two different PAM
services and use them both..