Re: securing pop3

[Glen Mehn]

Janus N. Tøndering wrote:

On Tue, 2003-02-11 at 19:30, Ross Currie wrote:

quite right.
You'll want to put something like /bin/false in your passwd file as the user's
shell.

Both /bin/false and /bin/true has been suggested. Any difference in
using the two?

/bin/false returns false, while /bin/true returns true. If you want to generate an error to the client, use /bin/false, but if you want 'exit 0' behaviour, then use /bin/true.

I, personally, use /bin/false.

(you can also use /usr/bin/passwd, and an authenticated ssh session will prompt for the old password again, and then allow a user to change it)

which is nice.
-g

--
Glen Mehn [EMAIL PROTECTED]
"if you ever swallow the universe, remember to spit the dragon
back out.xx. --swan


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]