From owner-freebsd-stable Wed Jul 15 07:20:41 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA23360 for freebsd-stable-outgoing; Wed, 15 Jul 1998 07:20:41 -0700 (PDT) (envelope-from owner-freebsd-stable@FreeBSD.ORG) Received: from nexus.astro.psu.edu (nexus.astro.psu.edu [128.118.147.20]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id HAA23347 for ; Wed, 15 Jul 1998 07:20:39 -0700 (PDT) (envelope-from mph@astro.psu.edu) Received: from mstar.astro.psu.edu by nexus.astro.psu.edu (4.1/Nexus-1.3) id AA14991; Wed, 15 Jul 98 10:19:48 EDT Received: by mstar.astro.psu.edu (SMI-8.6/Client-1.3) id KAA27097; Wed, 15 Jul 1998 10:19:44 -0400 Message-Id: <19980715101943.A27075@mstar.astro.psu.edu> Date: Wed, 15 Jul 1998 10:19:43 -0400 From: Matthew Hunt To: Wes Peters , tom@uniserve.com Cc: paulo@nlink.com.br, jer@jorsm.com, freebsd-stable@FreeBSD.ORG Subject: Re: Finger and getpwent Mail-Followup-To: Wes Peters , tom@uniserve.com, paulo@nlink.com.br, jer@jorsm.com, freebsd-stable@FreeBSD.ORG References: <199807151407.IAA15645@obie.softweyr.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.91.1i In-Reply-To: <199807151407.IAA15645@obie.softweyr.com>; from Wes Peters on Wed, Jul 15, 1998 at 08:07:59AM -0600 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, Jul 15, 1998 at 08:07:59AM -0600, Wes Peters wrote: > % Except that nologin just stops shell logins, not all password > % authentication. So POP, IMAP, some FTP, RADIUS, all suceed. Munging the > % password field is better. Attempts to access disabled accounts is logged > % as well, as will all incorrect passwords. > > These daemons should all be FIXED to not allow logins if the shell isn't > in /etc/shells. ftpd and wu-ftpd already do this; if the others don't, > we should ask the port maintainers to "fix" them for us. ;^) I would find it surprising if an invalid shell prevented users from using POP or IMAP. Disallowing shell logins and ftp while allowing mail retrieval seems like a very common configuration; how would you propose to setup a POP server if the POP daemon checked /etc/shells? -- Matthew Hunt * Stay close to the Vorlon. http://www.pobox.com/~mph/pgp.key for PGP public key 0x67203349. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message