[X-Unix] Remote force logout and lockout of user

Alexandre Gauthier supernaut at raptorized.com
Tue Jun 15 08:46:54 PDT 2004




On 15/06/04 00:45, "luke" <etyrnal at ameritech.net> wrote:

> 
> On Monday, June 14, 2004, at 08:24  AM, Craig A. Finseth wrote:
> 
>>    sure would be cool to find out that there is a unix-way to set a
>>    enable/disable account bit for a user...
>> 
>> There is.  Change their login shell to /dev/null and change their
>> _encyrpted_ password text in /etc/shadow to something like "***no
>> login***" (or any other text that can _not_ be output by the crypt(2)
>> call).
>> 
>> These changes keep someone from logging in, but won't affect current
> 
> how does that work for re-enabling?
> 
> their password is  now gone.
> 

Hence why the exclamation mark trick.
However, the passwd and shadow files are not used under OS X, it relies upon
netinfo. Perhaps that would work there as well?




More information about the X-Unix mailing list