From: dtucker Date: Thu, 16 Aug 2007 23:42:32 +0000 (+0000) Subject: - (dtucker) [sshd.8] Many Linux variants use a single "!" to denote locked X-Git-Tag: V_4_7_P1~8 X-Git-Url: http://andersk.mit.edu/gitweb/openssh.git/commitdiff_plain/145707abfd3e05e40cd793a5f04439febc5f312a - (dtucker) [sshd.8] Many Linux variants use a single "!" to denote locked accounts and that's what the code looks for, so make man page and code agree. Pointed out by Roumen Petrov. --- diff --git a/ChangeLog b/ChangeLog index 7559cef6..da17e947 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,8 @@ +20070817 + - (dtucker) [sshd.8] Many Linux variants use a single "!" to denote locked + accounts and that's what the code looks for, so make man page and code + agree. Pointed out by Roumen Petrov. + 20070816 - (dtucker) [session.c] Call PAM cleanup functions for unauthenticated connections too. Based on a patch from Sandro Wefel, with & ok djm@ diff --git a/sshd.8 b/sshd.8 index 8d6ab1cc..41939432 100644 --- a/sshd.8 +++ b/sshd.8 @@ -302,8 +302,9 @@ on Tru64, a leading .Ql \&*LOCKED\&* on FreeBSD and a leading -.Ql \&!! -on Linux). If there is a requirement to disable password authentication +.Ql \&! +on most Linuxes). +If there is a requirement to disable password authentication for the account while allowing still public-key, then the passwd field should be set to something other than these values (eg .Ql NP