locked account accessable via pubkey auth

[Dost, Alexander]

I can only speak for Solaris (8). But the comand 'passwd -l' is restricted
for root.
I think this behaviour is the same for all Solaris versions, as the only way
to unlock your password is to change it. Then the *LK* string is replaced by
the new password in /etc/shadow. But when you try to change your password
the first thing is to enter your login password, which is locked...

Alex

> -----Original Message-----
> From:	Dan Kaminsky [SMTP:dan at doxpara.com]
> Sent:	Wednesday, January 30, 2002 10:14
> To:	Dost, Alexander; Damien Miller; Frank Cusack
> Cc:	openssh-unix-dev at mindrot.org
> Subject:	Re: locked account accessable via pubkey auth
> 
> > If it is locked, the users is not allowed to change his own password. So
> he
> > can not unlock it. You get a permission denied when trying to do so.
> 
> Actually, that's really useful and very cool!  Which platforms support
> this
> behavior -- just recent Solaris, or most Unixen?
> 
> Can a user lock their own account?
> 
> --Dan
> 
> 



If you have received this e-mail in error or wish to read our e-mail disclaimer statement and monitoring policy, please refer to
http://www.drkw.com/disc/email/ or contact the sender.