Re: [Nss-mysql-users] nss-mysql-root.conf

[Jelmer Vernooij]

> > > No you do not. I have set up nss-mysql here and I've got vsftpd 
> > > authenticating via the usual pam_unix module without any problems 
> > > whatsoever - same for every other service I have running here.
> 
> > Wouldn't it be very insecure to do so - since using pam_unix would make 
> > it necessary to include the password of the user (althought encrypted) in 
> > the global nss directory - for which every user can write programs. 
> 
> How do you think a user can gain access if they have no access permissions 
> on the database themselves?
> 
> The only thing a user can do is to query it via getpwent() which is the 
> same access they had previously when using /etc/passwd.
In which case the (encrypted) passwords would be in /etc/shadow; data that 
was not available to the user via getpwent() then !

Jelmer