Re: [Nss-mysql-users] nss-mysql-root.conf

[Jason Clifford]

On Wed, 19 Jun 2002, Jelmer Vernooij wrote:

> > No you do not. I have set up nss-mysql here and I've got vsftpd 
> > authenticating via the usual pam_unix module without any problems 
> > whatsoever - same for every other service I have running here.

> Wouldn't it be very insecure to do so - since using pam_unix would make 
> it necessary to include the password of the user (althought encrypted) in 
> the global nss directory - for which every user can write programs. 

How do you think a user can gain access if they have no access permissions 
on the database themselves?

The only thing a user can do is to query it via getpwent() which is the 
same access they had previously when using /etc/passwd.

Jason Clifford