Hi

From the man page:

       --disabled-login
              Do not run passwd to set the password.  The user won't be able to 
use her account  until  the
              password is set.

       --disabled-password
              Like --disabled-login, but logins are still possible (for example 
using SSH RSA keys) but not
              using password authentication.


--disabled-login inserts a ! in the password field of /etc/shadow, 
--disabled-password inserts a * in the password field.

Testing on Debian 10, either way it's possible to log in with SSH using a 
keypair. So I'm guessing this gets overridden by PAM setup. Does anyone have a 
better insight into this.

Tim

--
 Next meeting: BEC, Bournemouth, Tuesday, 2020-02-04 20:00
 Check to whom you are replying
 Meetings, mailing list, IRC, ...  http://dorset.lug.org.uk/
 New thread, don't hijack:  mailto:dorset@mailman.lug.org.uk

Reply via email to