From owner-freebsd-isp Sat Jan 10 09:29:11 1998 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id JAA20741 for isp-outgoing; Sat, 10 Jan 1998 09:29:11 -0800 (PST) (envelope-from owner-freebsd-isp) Received: from nash.pr.mcs.net (nash.pr.mcs.net [204.95.47.72]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id JAA20709 for ; Sat, 10 Jan 1998 09:28:52 -0800 (PST) (envelope-from alex@nash.pr.mcs.net) Received: (from alex@localhost) by nash.pr.mcs.net (8.8.8/8.8.7) id LAA07557; Sat, 10 Jan 1998 11:26:56 -0600 (CST) (envelope-from alex) Message-Id: <199801101726.LAA07557@nash.pr.mcs.net> Date: Sat, 10 Jan 1998 11:26:56 -0600 (CST) From: Alex Nash Subject: Re: How to lock out a nonpaying user? To: totii@est.is cc: dhawk@river.org, freebsd-isp@FreeBSD.ORG In-Reply-To: <34B79D84.E8A9F2A2@est.is> MIME-Version: 1.0 Content-Type: TEXT/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8BIT Sender: owner-freebsd-isp@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk On 10 Jan, Žoršur Ivarsson wrote: > David Hawkins wrote: >> >> How do you lock out a person for nonpay so that it's relatively >> easy to reactivate their account later? I tried replacing their >> respective .cshrc and .profile with exec /bin/cat goaway.message >> but one has gotten around that. If they have a friend on the same system with an unlocked account, they can bypass the .cshrc and .profile with 'su -m'. >> Suggestions? > > You can disable the user with changeing password field of his through > 'vipw', we add '$' in front of the password field to see if user is > enabled or disabled. Note that both rsh and ssh can be setup to allow people in without checking the password field. Alex