Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Dec 2008 04:43:50 -0500 (EST)
From:      "Dan Mahoney, System Admin" <danm@prime.gushi.org>
To:        questions@freebsd.org
Subject:   How to block NIS logins via ssh?
Message-ID:  <alpine.BSF.2.00.0812100440400.49382@prime.gushi.org>

next in thread | raw e-mail | index | archive | help
Hello all,

I'm noticing that when following the directions given here:

http://www.freebsd.org/doc/en/books/handbook/network-nis.html

For how to disable logins, the recommended action is to set the shell to 
/sbin/nologin.

However, this is sloppy as it allows the user to log in, get the motd, do 
everything short of getting a shell.

I've tried starring out the password in the +::::::::: entry, (and putting 
in a "bad" password, like x), and those don't seem to work.  I am still 
able to connect via sshd and prove that the account works.

What's happening here?

-Dan

-- 

<Wrin> quick, somebody tell me the moon phase please?
<Dan_Wood> Wrin: Plummeting.

-Undernet #reboot, 9/11/01 (day of the WTC bombing)

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---------------------------




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.0812100440400.49382>