Michael Schloh is right: as the following test program proofed, Linux and Solaris getpwent() does _NOT_ provide the passwords of non-YP/NIS users while FreeBSD getpwent() does it correctly. So we have to use "shadow" there.. #include <stdio.h> #include <sys/types.h> #include <pwd.h> int main(int argc, char *argv[]) { struct passwd *pw; while ((pw = getpwent()) != NULL) printf("user=<%s> passwd=<%s>\n", pw->pw_name, pw->pw_passwd); }

sasl/sasl.spec

@@ -237,7 +237,10 @@ AutoReqProv:  no
 %if "%{with_pam}" == "yes"
     l_authmech="pam"
 %else
-    l_authmech="getpwent"
+    case "%{l_target}" in
+        *-linux* | *-solaris* ) l_authmech="shadow"   ;;
+        *                     ) l_authmech="getpwent" ;;
+    esac
 %endif
     %{l_shtool} mkdir -f -p -m 755 \
         $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d