Locked account and logging in with public key

[Osmo Paananen]

Hi!

I'm using Openssh v3.5p1 with Solaris 8 compiled with pam support enabled.

It seems that if I use public key authentication I can log in to an 
account that is locked (/etc/shadow has *LK* as password).
Login is also allowed even if the user does not have a valid shell.

Is this a bug or am I missing something?

-- 
   Osmo Paananen