On Monday, June 14, 2004, at 08:24 AM, Craig A. Finseth wrote: > sure would be cool to find out that there is a unix-way to set a > enable/disable account bit for a user... > > There is. Change their login shell to /dev/null and change their > _encyrpted_ password text in /etc/shadow to something like "***no > login***" (or any other text that can _not_ be output by the crypt(2) > call). > > These changes keep someone from logging in, but won't affect current how does that work for re-enabling? their password is now gone.