Comment 25 for bug 64301

Actually doing this works, but I would prefer to not have to do it:

root@digit:/etc/pam.d# chmod u+s /sbin/unix_chkpwd
root@digit:/etc/pam.d# ls -Fald /sbin/unix_chkpwd
-rwsr-sr-x 1 root shadow 19584 2008-05-16 08:21 /sbin/unix_chkpwd*

Not really sure why this is required. No files set up by the libnss-mysql-bg package are root only except /etc/libnss-mysql-root.cfg which I set to be group shadow to match /sbin/unix_chkpwd.