Can only root use PAM to auth against /etc/shadow?

[Tim Dijkstra <tim@famdijkstra.org>]

Hi,

I'm trying to get some app to use PAM to authenticate against  /etc/shadow.
-rw-r-----    1 root     shadow       1184 Jan 31 02:06 /etc/shadow
Shouldn't it be enough for the app to
be a member of the 'shadow' group for this to work? Or are there any
other restrictions.
(Works fine when I make /etc/shadow world-readable, but don't want that
of course)


Thnx Tim