On Mon, 2010-08-30 at 14:15 +0200, Egbert Jan van den Bussche wrote: > Hi, > > I seem to be forced to run the auth proces as root because I want to use > pam for local users. My gut feeling says that this is Not Good. Is there > another way? > For the virtual users 'vmail' is good enough because that user may > access the MySQL database.
If your /etc/shadow is readable by "shadow" group, you can use auth_user=something that uses shadow group as the primary group (maybe create a new "doveauth" user).
