From owner-freebsd-stable Wed Jul 15 07:08:44 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA22010 for freebsd-stable-outgoing; Wed, 15 Jul 1998 07:08:44 -0700 (PDT) (envelope-from owner-freebsd-stable@FreeBSD.ORG) Received: from obie.softweyr.com ([204.68.178.33]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA22004 for ; Wed, 15 Jul 1998 07:08:42 -0700 (PDT) (envelope-from wes@softweyr.com) Received: from obie.softweyr.com (zaphod.softweyr.com [204.68.178.35]) by obie.softweyr.com (8.8.8/8.8.8) with SMTP id IAA15645; Wed, 15 Jul 1998 08:07:59 -0600 (MDT) (envelope-from wes@softweyr.com) Date: Wed, 15 Jul 1998 08:07:59 -0600 (MDT) Message-Id: <199807151407.IAA15645@obie.softweyr.com> Subject: Re: Finger and getpwent From: Wes Peters To: tom@uniserve.com Cc: paulo@nlink.com.br, jer@jorsm.com, freebsd-stable@FreeBSD.ORG Reply-To: Wes Peters In-Reply-To: References: X-Priority: 3 (Normal) X-Mailer: BeatWare Mail-It 1.6 X-BeOS-Platform: Intel or clone Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by hub.freebsd.org id HAA22006 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG My hidden microphone recorded Tom (tom@uniserve.com) saying: % % On Mon, 13 Jul 1998, Wes Peters wrote: % % > A *somewhat* better solution is to use my nologin program, which logs % > attempts to login to disabled accounts via syslog. You can retrieve % % Except that nologin just stops shell logins, not all password % authentication. So POP, IMAP, some FTP, RADIUS, all suceed. Munging the % password field is better. Attempts to access disabled accounts is logged % as well, as will all incorrect passwords. These daemons should all be FIXED to not allow logins if the shell isn't in /etc/shells. ftpd and wu-ftpd already do this; if the others don't, we should ask the port maintainers to "fix" them for us. ;^) -- "Where am I, and what am I doing in this handbasket?" Wes Peters Softweyr LLC http://www.softweyr.com/~softweyr wes@softweyr.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message