Peter Hardy wrote:
Last I looked (admittedly, one of the earlier FCs), Red Hat and friends started numbering regular user accounts at 100. Numbers below that are informally reserved for system accounts. Debian does the same thing, only they start at 1000.
Red Hat uses 500. The 100 in the PAM configuration is a bug, but not an important one.
So, what is pam_succeeed_if there for? To stop regular users from running cron jobs?
To allow system users to login when the network has gone away on systems which configure LDAP or other network authentication. Prior to this fix you'd have to boot the machine into single user mode to get access if the network went away! Cheers, Glen -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
