Re: Testing checkpassword on FreeBSD

On Monday, January 12, 2004, at 10:11  pm, Chris Johnson wrote:

>  Are you sure you're actually using a correct user name and
> password?

Ack--I feel quite foolish. I changed my password a few weeks ago; when 
I log in, I don't even think of the password, my fingers just type it 
out for me. But when running the tests, I was making a conscious effort 
to ensure that I didn't mistype anything, and have been using my older 
password! The tests work fine now, thank you.  :)
A related question...

I patched qmail 1.03 with K. Dabrowski's smtp-auth patch, without using 
CRAM-MD5 support. I know that checkpassword needs root access to work, 
but am confused how to proceed. Most advice I've come across seems to 
assume use of CRAM-MD5 and it's password file; Dabrowski's page 
suggests to "make it suid root or find another (safer) way to make it 
read that file."

The obvious route seems to be suid, but the implication is that it's 
unsafe. What is the accepted/safest way to proceed?

Thanks again,