From: Jim Haynes on
Just did a fresh install of Fedora 7 on my laptop. As usual, when
I try to run kppp it asks me for the root password. That's because
kppp goes through consolehelper which uses PAM.

Some releases back I found an incantation on the web to change pam to let
an ordinary user run kppp. But things changed after that so the
/etc/pam.d/kppp file doesn't look like the old one. I'd like to fix
this in the "correct" way, rather than the kind of fixes you see that
involve not using the consolehelper and executing a setuid kppp directly.

PAM seems terribly inscrutable.
From: Jim Haynes on
To answer my own question...

In article <13l10mqgmnf2a63(a)corp.supernews.com>,
Jim Haynes <jhaynes(a)alumni.uark.edu> wrote:
>Some releases back I found an incantation on the web to change pam to let
>an ordinary user run kppp.

That is, change the auth line to
auth sufficient pam_permit.so

(This in FedoraForum by tejas, 2005-08-12

>PAM seems terribly inscrutable.

There is a nice article in Linux Format magazine, issue 99, December 2007,
page 86.