From owner-freebsd-questions@FreeBSD.ORG Tue Apr 5 22:49:11 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CB70E16A4CE for ; Tue, 5 Apr 2005 22:49:11 +0000 (GMT) Received: from post-24.mail.nl.demon.net (post-24.mail.nl.demon.net [194.159.73.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3376943D3F for ; Tue, 5 Apr 2005 22:49:11 +0000 (GMT) (envelope-from albi@scii.nl) Received: from aseed.demon.nl ([83.160.138.119]:10091 helo=mail.aseed.antenna.nl) by post-24.mail.nl.demon.net with esmtp (Exim 4.43) id 1DIwr8-000Bwm-AL; Tue, 05 Apr 2005 22:49:10 +0000 Received: from http.aseed.antenna.nl (unknown [192.168.0.50]) by mail.aseed.antenna.nl (Postfix) with ESMTP id 735872841A7; Wed, 6 Apr 2005 00:50:15 +0200 (CEST) Received: from localhost.localdomain (f80052.upc-f.chello.nl [80.56.80.52]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by http.aseed.antenna.nl (Postfix) with ESMTP id 03CCF58C829; Wed, 6 Apr 2005 00:49:09 +0200 (CEST) Date: Wed, 6 Apr 2005 00:49:08 +0200 From: "albi@scii.nl" To: Bob Ababurko Message-Id: <20050406004908.01af6edb.albi@scii.nl> In-Reply-To: <42531440.30103@adelphia.net> References: <42531440.30103@adelphia.net> X-Mailer: Sylpheed version 1.0.4 (GTK+ 1.2.10; i386-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit cc: questions@freebsd.org Subject: Re: suspending login X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2005 22:49:11 -0000 On Tue, 05 Apr 2005 18:42:08 -0400 Bob Ababurko wrote: hi, > I am trying to figure out how to suspend a login for a user. Do I > have to do this with password aging or is there an easier(read brute > force) way to disallow a user from logging in? do you want to directly disable a login for a certain user ? - become root (or use sudo) - with vipw replace the password-bit by a * as you can here e.g. : _pflogd:*:64:64::0:0:pflogd privsep user:/var/empty:/usr/sbin/nologin pop:*:68:6::0:0:Post Office Owner:/nonexistent:/usr/sbin/nologin ^^^^^^^ the password-part is between the first and second colon if you want to use your favorite editor (e.g. nano) instead of vi with vipw, do the following before starting vipw, assuming bash is your default shell : export EDITOR=nano