Re: securing pop3

2003-02-10 Thread Ross Currie
Quoting vincenzo [EMAIL PROTECTED]:

 On Mon, 10 Feb 2003 16:26:03 -0500 (EST)
 Mike Dresser [EMAIL PROTECTED] wrote:
 
  That lets you in just fine unfortunately.
  
  mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser:
  
  x:~# login
  x login: mdresser
  Password:
  Last login: Mon Feb 10 16:23:51 2003 on pts/1
  Linux x 2.4.20 #1 SMP Sun Feb 2 22:20:23 EST 2003 i686 unknown
  You have mail.
  mdresser@x:~$
 
 How can it be possible ? Doesn't the system normally check at the shell
 field value in /etc/passwd to look for the shell to use ?
 Is it using a default shell in the case where no shell value is specified
 ?
 

quite right.
You'll want to put something like /bin/false in your passwd file as the user's
shell.
To change the default for new accounts you can edit /etc/adduser.conf

-ross



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: securing pop3

2003-02-10 Thread Ross Currie
Quoting vincenzo [EMAIL PROTECTED]:

 On Mon, 10 Feb 2003 16:26:03 -0500 (EST)
 Mike Dresser [EMAIL PROTECTED] wrote:
 
  That lets you in just fine unfortunately.
  
  mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser:
  
  x:~# login
  x login: mdresser
  Password:
  Last login: Mon Feb 10 16:23:51 2003 on pts/1
  Linux x 2.4.20 #1 SMP Sun Feb 2 22:20:23 EST 2003 i686 unknown
  You have mail.
  [EMAIL PROTECTED]:~$
 
 How can it be possible ? Doesn't the system normally check at the shell
 field value in /etc/passwd to look for the shell to use ?
 Is it using a default shell in the case where no shell value is specified
 ?
 

quite right.
You'll want to put something like /bin/false in your passwd file as the user's
shell.
To change the default for new accounts you can edit /etc/adduser.conf

-ross