Very Computer

by **Friedemann Buerg** » Thu, 05 Aug 1993 04:01:26

: : [...]
: : This also shows why you can't lock someone's account just by changing their
: : shell to /bin/false or just a NULL field
Maybe this is a stupid question, but I do not understand this:
If the user cannot log in because he has an invalid shell, he
is unable to change that.
I followed the thread but I wonder what does the statement 'this shows'
actually mean?

Sincerely
Friedemann Buergel

by **Jan Wie** » Fri, 06 Aug 1993 07:08:50

: : : [...]
: : : This also shows why you can't lock someone's account just by changing their
: : : shell to /bin/false or just a NULL field
: Maybe this is a stupid question, but I do not understand this:
: If the user cannot log in because he has an invalid shell, he
: is unable to change that.

FTP is also access to a system. So disabling interactive ac-
cess only doesn't mean to lock the account (O.K. other's al-
ready pointed out that well configured ftp...).

You should also care for at(1) job's. With things like that,
a user may try to execute chsh(1) periodically, if setting an
inappropriate login shell is the usual way of the system ad-
ministrator.

My at(1) care's for account's, disabled in /etc/account.

Until later, Jan

--
#======================================================================#
# It's easier to get forgiveness for being wrong than for being right. #
# Let's break this rule - forgive me. #

Very Computer

/etc/account (was: Re: locked my root account...help !)

/etc/account (was: Re: locked my root account...help !)

/etc/account (was: Re: locked my root account...help !)