From owner-freebsd-bugs Mon Jan 27 3: 9:15 2003 Delivered-To: freebsd-bugs@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EB2B737B401; Mon, 27 Jan 2003 03:09:13 -0800 (PST) Received: from prime.gushi.org (prime.gushi.org [65.125.228.130]) by mx1.FreeBSD.org (Postfix) with ESMTP id 11E0643F43; Mon, 27 Jan 2003 03:09:12 -0800 (PST) (envelope-from danm@prime.gushi.org) Received: from localhost (danm@localhost.com [127.0.0.1] (may be forged)) by prime.gushi.org (8.12.3/8.12.3) with ESMTP id h0RB6DZV011401; Mon, 27 Jan 2003 06:06:13 -0500 (EST) Date: Mon, 27 Jan 2003 06:06:12 -0500 (EST) From: "Dan Mahoney, System Admin" To: Mike Makonnen Cc: FreeBSDbugs@gushi.org, Subject: Re: bin/47541: pw lock still allows access In-Reply-To: <200301271038.h0RAcBKq089737@freefall.freebsd.org> Message-ID: <20030127060511.J539-100000@prime.gushi.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 27 Jan 2003, Mike Makonnen wrote: > Synopsis: pw lock still allows access > > State-Changed-From-To: open->closed > State-Changed-By: mtm > State-Changed-When: Mon Jan 27 02:28:56 PST 2003 > State-Changed-Why: > >From the man page: > > The pw utility supports a simple password locking mechanism for users; it > works by prepending the string `*LOCKED*' to the beginning of the pass- > word field in master.passwd to prevent successful authentication. > > The operative phrase here is "... to prevent successful authentication." > If you are using ssh with key-based authentication, then authentication > with the passwd database doesn't enter into it. And any potential freeBSD user who needs the manpage may not know that. At the very least this should be listed in the BUGS section of the manpage. > > http://www.freebsd.org/cgi/query-pr.cgi?pr=47541 > -- "I wish the Real World would just stop hassling me!" -Matchbox 20, Real World, off the album "Yourself or Someone Like You" --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site: http://www.gushi.org --------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message