PAM authentication is sometimes difficult to employ because the PAM
module runs in the context of the caller, and therefore requires root
privileges. I've written a PAM module called pam_shadow_auth that
avoids this restriction by communicating via RPC with a server program
that runs as root. The PAM module and RPC server are written for
Solaris 2.6 and later Solaris versions. Source is available at:
http://mail.cc.umanitoba.ca/source/
--
-Gary Mills- -Unix Support- -U of M Academic Computing and Networking-