-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 03/22/2012 03:20 PM, Jeffrey Walton wrote:
> On Thu, Mar 22, 2012 at 4:10 PM, Stephanie Daugherty
> <[email protected]> wrote:
>> If I recall correctly, that means no password has been set. !! effectively
>> prevents any password from matching the hash, therefore password login can't
>> be used for the account, but depending on SSHD configuration, SSH keys
>> *might* be able to be used to log in.
> OK, thanks.
> 
> The account in question (tomcat) is actually in sudoers with NOPASSWD.
> Its on a box with SE Linux, but its not enabled.
> 
> Jeff
> 
>> On Thu, Mar 22, 2012 at 3:29 PM, Jeffrey Walton <[email protected]> wrote:
>>>
>>> Hi Guys,
>>>
>>> Does anyoneone know what causes "!!" to show up in /etc/shadow (the
>>> account is enabled and has a login shell).
>>>
>>> Jeff


!! normally shows up when the account is "locked", ie usermod -L <account>

man usermod

As previously stated they could still possibly be able to login using
ssh keys.

- -- 


Larry Brower, CCENT

Fedora Ambassador - North America
Fedora Quality Assurance
[email protected]
http://www.fedoraproject.org/
-----BEGIN PGP SIGNATURE-----
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=qXTb
-----END PGP SIGNATURE-----
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Reply via email to