At 11:01 +0100 2000-01-03, H. Peter Anvin wrote: >Shadow is an ad hoc package. What we really want to use is >PAM/passwddb.
shadow is now fully PAM-enabled thanks to its present Debian maintainer (the only reason upstream doesn't have the patches merged is because Marek hasn't had time to make a new release yet). [ Later, it's clarified that you meant "pwdb" instead of "passwddb" ] pwdb is a bad idea for a couple of reasons, first of all it duplicates the functionality of NSS, a mechanism which works fine and does not need to be bypassed. Second, pam_unix does everything pam_pwdb does without bypassing NSS. -- Joel Klecker (aka Espy) Debian GNU/Linux Developer <URL:mailto:[EMAIL PROTECTED]> <URL:mailto:[EMAIL PROTECTED]> <URL:http://web.espy.org/> <URL:http://www.debian.org/>
