Duplicate entries in shadow file

[Freddie C. <fc...@oc...>]

Greetings group,

Just a quick query to see if anyone has come across this.  Not sure if=20
it's a definite WebMin issue or not, but WebMin is one of the variables=20
in the equation.

I've set up a server for webmail using UW-IMAP, SquirrelMail, and=20
Sendmail for e-mail and WebMin 0.90 for administration.  This has been=20
working beautifully for the past 4 months, or so I thought.

Several users and admins have begun to complain about password changes=20
not sticking, even though everything indicates that their passwords=20
have changed.  Turns out, there are mutliple entries for various users=20
in the /etc/shadow file.

There are three ways to change passwords on this server:
  -- via WebMin
  -- via Squirrelmail (using the poppassd plugin)
  -- via commandline

It looks like whatever service is being used to change the password is=20
reading the old password and then appending the new password entry to=20
the shadow file instead of overwriting the old one.

I have not been able to reproduce this on my own, and am just looking=20
for pointers or previous encounters or possible causes/solutions.  This=20
is a very perplexing problem, and I am at my wits' end with this one.

Is this a known WebMin problem?  Has anyone come across this before? =20
Anyone have experience using poppassd?


--=20
Cheers,
Freddie=09=09=09PhoenixTek Consulting
fc...@bi...=09Unix / Networking / Security Services
=09=09=09(250) 314-4029