On Mon, 2010-08-30 at 14:15 +0200, Egbert Jan van den Bussche
wrote:> Hi,
>
> I seem to be forced to run the auth proces as root because I want to use
> pam for local users. My gut feeling says that this is Not Good. Is there
> another way?
> For the virtual users 'vmail' is good enough because that user may
> access the MySQL database.
If your /etc/shadow is readable by "shadow" group, you can use
auth_user=something that uses shadow group as the primary group (maybe
create a new "doveauth" user).