Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 17 Jun 2001 07:22:52 -0700
From:      dmp <dmp@pantherdragon.org>
To:        Sheldon Hearn <sheldonh@starjuice.net>
Cc:        George.Giles@mcmail.vanderbilt.edu, freebsd-security@freebsd.org
Subject:   Re: Controlling imap access
Message-ID:  <3B2CBD3C.7599AB7D@pantherdragon.org>
References:  <15483.992767509@axl.seasidesoftware.co.za>

next in thread | previous in thread | raw e-mail | index | archive | help
Sheldon Hearn wrote:
> On Fri, 15 Jun 2001 13:54:32 EST, George.Giles@mcmail.vanderbilt.edu wrote:
> 
> > Is there ia way using pam to have user authenticate for imap access, but be
> > unable to login ?
> 
> You don't need PAM for this.  Set the user's shell to /sbin/nologin.

It depends on the IMAP daemon.  Some will disallow the user if their
shell is /sbin/nologin.  Better to use /nonexistent.  You can or add
something like /usr/bin/true to /etc/shells and use that, if the
daemon is picky about the user having a valid shell.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B2CBD3C.7599AB7D>