Date: Sun, 21 Nov 1999 03:44:55 -0500 From: Sean Kelly <smkelly@slashnet.org> To: FreeBSD-gnats-submit@freebsd.org, green@FreeBSD.org Subject: ports/15015: OpenSSH not obiding by 'ignorenologin' Message-ID: <E11pScB-000KU1-00@area51.slashnet.org>
next in thread | raw e-mail | index | archive | help
>Number: 15015
>Category: ports
>Synopsis: OpenSSH is not letting a user login despite 'ignorenologin' in login.conf
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: freebsd-ports
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Sun Nov 21 00:50:00 PST 1999
>Closed-Date:
>Last-Modified:
>Originator: Sean Kelly
>Release: FreeBSD 3.3-STABLE i386
>Organization:
SlashNET / OsOnline.Org
>Environment:
User smkelly is a member of class 'staff'.
Class staff from /etc/login.conf:
staff:\
:ignorenologin:\
:ignoretime:\
:priority=-20:\
:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
:tc=default:
>Description:
After creating a /var/run/nologin file, all logins are denied.
This includes 'smkelly', who is in the 'staff' class who SHOULD
still be able to login.
>How-To-Repeat:
Make a class that allows logins when there is a nologin file.
Put a user in the class. Make a nologin file, try to login.
>Fix:
Magic? I'm not exactly sure as I'm not farmilliar with
the login.conf reading functions.
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E11pScB-000KU1-00>