PAM auth with disabled user

Paul Moore paul.moore at
Wed Jan 11 08:50:52 EST 2006

Is it intentional that password auth using PAM continues trying to log
on (giving password 3 prompts) in the case that a user is disabled (so
that pam_account returns an error code).

It can be argued both ways (saying 'you are disabled' is giving out too
much information, making it look like you are entering the wrong
password confuses and frustrates the user)

More information about the openssh-unix-dev mailing list