>>Now - how exactly would you do that with BSD Auth?

>Not sure.  I know that one of the canonical examples is login_rpasswd which
>uses a separate database for RADIUS users.

When the username is known to the local system - its a no brainer.
I'm talking about when the application authenticate's zaphod
but actually logs into a template account (ie pw_name=="remote").
So uid/gid would be those for the template user.  The only remnant of
the authenticated username is in logname - so audit logs etc are
meaningful.

Thanks
--sjg