passwd that uses PAM complains that it's not running as root, even from programs that are suid to root. (This includes forked programs that exec to passwd without invoking the bash 2.0 shell, which apparently disables suid root when it starts.) Can anyone suggest a method to change passwords from programs that aren't logged in as root (i.e., ones that are just suid to root)? Is passwd the only program that can change the shadow password file (especially using the MD5 passwords) ? Thanks, Dave