From owner-freebsd-security@FreeBSD.ORG  Fri Jul 11 07:23:21 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AC98837B401
	for <freebsd-security@freebsd.org>;
	Fri, 11 Jul 2003 07:23:21 -0700 (PDT)
Received: from blue.gerhardt-it.com (gw.gerhardt-it.com [204.83.38.103])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C90CC43FB1
	for <freebsd-security@freebsd.org>;
	Fri, 11 Jul 2003 07:23:20 -0700 (PDT)	(envelope-from scott@g-it.ca)
Received: from [24.78.101.202] (h24-78-101-202.ss.shawcable.net
	[24.78.101.202])
	by blue.gerhardt-it.com (Postfix) with ESMTP id AB823FDC9
	for <freebsd-security@freebsd.org>;
	Fri, 11 Jul 2003 08:23:19 -0600 (CST)
User-Agent: Microsoft-Entourage/10.1.1.2418
Date: Fri, 11 Jul 2003 08:23:18 -0600
From: Scott Gerhardt <scott@g-it.ca>
To: <freebsd-security@freebsd.org>
Message-ID: <BB342476.5855%scott@g-it.ca>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Subject: Login.Access
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Jul 2003 14:23:22 -0000


Login seems to be ignoring my /etc/login.access settings.

I have the following entries (see below) in my login.access, yet any new
user (not in the wheel group) is still allowed to login.  What am I missing?


# $FreeBSD: src/etc/login.access,v 1.3 1999/08/27 23:23:42 peter Exp $
#
-:ALL EXCEPT wheel:console
-:ALL EXCEPT wheel:ALL


Thanks,


-- 
Scott Gerhardt, P.Geo.
Gerhardt Information Technologies [G-IT]