Seriously mce any solution you reach is probably going to be the least worst of a bad bunch. My thoughts were to have a local daemon running as root - and let your cgi script use some kind of IPC to talk to it. I suppose it's a pseudo system_auth proxy. This is rather more complicated than valdez's solution, but it should be said that having your cgi read the hashed passwords itself is begging to be exploited by one of many vulnerabilities that permit clients to see script source or god forbid fiddle with the file itself.
Whatever ideas you come up with, exercise caution.In reply to Re: authenticate via cgi-bin
by submersible_toaster
in thread authenticate via cgi-bin
by mce
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |