28 Mar
2007
28 Mar
'07
8:02 p.m.
On 28/03/2007 17:32, Taras Savchuk wrote:
In FreeBSD pam_group does exactly what I want:
Oh, sorry, didn't know you were on *BSD but I suppose I shouldn't have assumed Linux. In Linux-PAM, pam_wheel's documentation is very similar to your pam_group, with the addition of an option:
use_uid The check for wheel membership will be done against the current uid instead of the original one (useful when jumping with su from one account to another for example).
It would be useful with Dovecot too, because you don't want your pam_group checking Dovecot's group membership - and this may be why it's not working for you. If you have a pam_succeed_if or equivalent, perhaps you could try that.
Cheers,
John.