>> I donot know when the cvs auth a user, it base on /etc/passwd, >> /etc/shadow or base on PAM login? > >When I last heard, CVS was moving toward PAM. Where did you hear that? It's supported Kerberos 5 via GSSAPI (gserver) for years, AFAIK. --Ken