>
>
> On Tue, 20 Feb 1996, Swen Thuemmler wrote:
>
> > On 19 Feb 1996, Christoph Lameter wrote:
> >
[..]
> How about requiring root priviledges for getpwent()?
>
> But then passwd needs to run with root priviledges.
Before this discussion gets to trivial: If you send mail, your user
agent (e.g. elm, pine, etc) looks up your full name via getpwent().
Normal users still want to send mail.
Secondly don't NIS clients broadcast the domainname when searching a
server? Any PC with a packet sniffer can display those packets. A
domainname is a password in very much the same manner as a hostname
or an IP address, that is none at all.
Ulrich