Does pam_chauthtok require root?

[Edmund Takashima]

It appears that root access is needed to change passwords with pam_chauthtok (using libpam_unix). I've tried this on 11.11 and 11.23. This seems an odd requirement, since the old password needs to be supplied. Can someone please confirm/deny this? And, if root is necessary, suggest a way to allow a user to programatically change their own password that doesn't require root.