On Oct 20, 2008, at 8:00 PM, Sascha Wilde wrote:
My solution:1. The userdb-only checkpassword script sees no AUTHORIZED in the environment and returns with an exit code != 0[0]
You assume that the script actually checks this. There's no requirement that a userdb-only script needs to bother doing it. The use of AUTHORIZED environment is necessary only if the script wants to handle both passdb and userdb.
PGP.sig
Description: This is a digitally signed message part