Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Aug 1999 03:08:25 -0400
From:      "Joe Gleason" <clash@tasam.com>
To:        <freebsd-security@FreeBSD.ORG>
Subject:   making sshd2 check user expiration dates
Message-ID:  <007701bee491$7c14a070$0286860a@tasam.com>

next in thread | raw e-mail | index | archive | help
I'm not sure if security is the right list, but this has to do with allowing
or denying access to a system based on expiration date, which I consider
relevant to security.

Does anyone know how to make sshd2 check user expiration dates?

I did a quick test, and telnet, pop3, ftpd and sshd1 all do NOT allow a user
with an expired account to login.
sshd2 however does.

By expired I mean field 7 in master.passwd file having a number that is
between 0 and the current time in seconds exclusive.

I am running FreeBSD 3.2-stable (a few days old)

I installed ssh via installing /usr/ports/security/ssh and then
/usr/ports/security/ssh2 (that way I have all the ssh1 stuff for
compatibility).  I haven't touched the config's much, if at all.  I looked
through the man page and config files real quick and didn't see anything
about user expiration dates.  It is 3am, so I could have easily missed
something.  Anyone with any ideas of experience with this, any help would be
appreicated.  I would really prefer not to have to hack something odd
togather to support expiration dates.

Joe Gleason
Tasam



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?007701bee491$7c14a070$0286860a>