ok deraadt@

ok deraadt@

run by root, it binds a shared address to the socket, cranks the
process priority and drops privileges. sio_open(3) will try to
connect to the private socket first (if any), then to the shared
socket. Only one user may have connections to aucat at a given
time.
based on discussions with henning, pyr and others
ok jacek, deraadt

discussed with pyr@ and deraadt@

discussed with and ok uwe@

ok deraadt@, reyk@, pyr@

approved by deraadt@, ok thib@

what the daemon does - it is a relayer that pays attention to the status
of pools of hosts; not a status checkers that happens to do some relaying

start.
ok dlg@

ok miod@, henning@

ok claudio@

ok derradt@

ok deraadt@ millert@

_pflogd user and group must be created for proper operation.
ok frantzen@ henning@ mcbride@ deraadt@

and admin servers
ok deraadt@

shadow -> _shadow, tokenadm -> _token, and also add _radius.

of setuid root.  deraadt@ OK

group.  This changes getpw* to always try the shadow db first and
then fall back to the db w/o password hashes.  In the future,
/usr/libexec/auth/login_passwd (and others) will be setgid shadow
instead of setuid root.  OK deraadt@
If you track -current you should do the following:
o add group shadow to /etc/group
o chgrp shadow /etc/spwd.db
o chmod 640 /etc/spwd.db
o rebuild and install src/usr.sbin/pwd_mkdb
You do not need to rebuild libc yet, but it would't hurt to do so.

The actual X code to use them will be added soon.

Consider this a head-up...

are *required*.