[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Not allow users to change passwd
On Wed, 15 Sep 1999, Brian Somers wrote:
> > Hi oBSD'ers.
> > I have a server (yes my old crappy one) where people can log
> > in only if they've sent me their public ssh key.
> > I want to disable their regular Unix password, and make sure
> > they can't change it.
> > What is the best way of doing this ?
> You don't actually have to do anything smart :*) If you just vipw
> and * out everyones password your job is done. Remember, passwd will
> prompt the user for their old password !
to avoid the nightly security stuff from winging about 'disabled' accounts;
I have passwd entries like this:
aklwong:***ssh*only**:5125:5125:Kai Leung Wong:/home/aklwong:/usr/local/bin/tcsh
David Leonard David.Leonard@csee.uq.edu.au
Dept of Comp. Sci. and Elec. Engg _ Room:78-624 Ph:+61 7 336 52447
The University of Queensland |+| http://www.csee.uq.edu.au/~leonard/
QLD 4072 AUSTRALIA ~` '~ E2A24DC6446E5779D7AFC41AA04E6401
Pi has so far been computed to over a billion places and no pattern in the
digits has been discovered, other than the obvious one. - Francis Barrett