On Friday, May 05, 2006 09:17:34 PM -0700 Russ Allbery <rra at stanford.edu> wrote: > One difficulty is that if the authentication is not > being done as root, the PAM module needs something other than the host > keytab to use for verification ... or a setuid-0 helper program.