From owner-cvs-all@FreeBSD.ORG Sun Sep 18 20:31:28 2005 Return-Path: X-Original-To: cvs-all@freebsd.org Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4A7E316A420 for ; Sun, 18 Sep 2005 20:31:28 +0000 (GMT) (envelope-from keramida@ceid.upatras.gr) Received: from mail.vivodinet.gr (mail3.vivodinet.gr [80.76.39.13]) by mx1.FreeBSD.org (Postfix) with SMTP id B274D43D48 for ; Sun, 18 Sep 2005 20:31:26 +0000 (GMT) (envelope-from keramida@ceid.upatras.gr) Received: (qmail 11565 invoked from network); 18 Sep 2005 20:31:21 -0000 Received: from dslcustomer-222-89.vivodi.gr (HELO flame.pc) (83.171.222.89) by 0 with SMTP; 18 Sep 2005 20:31:21 -0000 Received: from flame.pc (flame [127.0.0.1]) by flame.pc (8.13.4/8.13.4) with ESMTP id j8IKVAiQ001458; Sun, 18 Sep 2005 23:31:10 +0300 (EEST) (envelope-from keramida@ceid.upatras.gr) Received: (from keramida@localhost) by flame.pc (8.13.4/8.13.4/Submit) id j8IKV93g001457; Sun, 18 Sep 2005 23:31:09 +0300 (EEST) (envelope-from keramida@ceid.upatras.gr) Date: Sun, 18 Sep 2005 23:31:09 +0300 From: Giorgos Keramidas To: Gavin Atkinson Message-ID: <20050918203109.GA1419@flame.pc> References: <200509181540.j8IFe2LR042274@repoman.freebsd.org> <20050918200104.F89636@ury.york.ac.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20050918200104.F89636@ury.york.ac.uk> Cc: cvs-src@freebsd.org, src-committers@freebsd.org, cvs-all@freebsd.org Subject: Re: cvs commit: src/share/man/man5 passwd.5 X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Sep 2005 20:31:28 -0000 On 2005-09-18 20:16, Gavin Atkinson wrote: > On Sun, 18 Sep 2005, Giorgos Keramidas wrote: > > Modified files: > > share/man/man5 passwd.5 > > Log: > > Explain the use of `*' in master.passwd and that it's slightly > > different from the use of `*' in /etc/passwd. > > +.Nm master.passwd > +file, a password of > +.Ql * > +is used to indicate that no one can ever log into that account. > +The field only contains encrypted passwords, and > +.Ql * > +can never be the result of encrypting a password. > > This is not strictly true - all it prevents is logins using passwords. > Passwordless logins using SSH public keys (for example) are unaffected. > > Perhaps the attached patch chould be committed? Yeah, I've been talking with simon@ about this. I was preparing to commit something similar, see below: > --- passwd.5.old Sun Sep 18 16:40:02 2005 > +++ passwd.5 Sun Sep 18 20:15:16 2005 > @@ -110,7 +110,9 @@ > .Nm master.passwd > file, a password of > .Ql * > -is used to indicate that no one can ever log into that account. > +is used to indicate that no one can ever log into that account > +using passwords. > +Passwordless logins will not be prevented. > The field only contains encrypted passwords, and > .Ql * > can never be the result of encrypting a password. Would this be ok? % Index: passwd.5 % =================================================================== % RCS file: /home/ncvs/src/share/man/man5/passwd.5,v % retrieving revision 1.45 % diff -u -r1.45 passwd.5 % --- passwd.5 18 Sep 2005 15:40:02 -0000 1.45 % +++ passwd.5 18 Sep 2005 20:30:21 -0000 % @@ -110,7 +110,11 @@ % .Nm master.passwd % file, a password of % .Ql * % -is used to indicate that no one can ever log into that account. % +is used to indicate that no one can ever log into that account % +using password authentication (logins through other forms of % +authentication, i.e.\& using % +.Xr ssh 1 % +keys, will still work). % The field only contains encrypted passwords, and % .Ql * % can never be the result of encrypting a password.