My only other comment is that in the past I've had to update i.shadow to change the status of some accounts between *LK* and NP, so sometimes we do actually want to change the password field because due to legacy unix it is overloaded between the hashed password and the special strings for locked and "Not Participating" (NP). However I don't expect any more of those in the future and if so we can deal with it via an SMF service. So this is just a "historical" comment about what this does versus i.passwd and i.shadow that it replaces.
I actually had to make such a change to an user action recently since either there had been a change in the base password file or I made a mistake when I originally transcribed it into the action.
Perhaps the on-disk shadow file field should be left along only if it's not *LK* or NP? Do we support users changing them for accounts delivered with OpenSolaris? _______________________________________________ pkg-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
