Hi From the man page:
--disabled-login Do not run passwd to set the password. The user won't be able to use her account until the password is set. --disabled-password Like --disabled-login, but logins are still possible (for example using SSH RSA keys) but not using password authentication. --disabled-login inserts a ! in the password field of /etc/shadow, --disabled-password inserts a * in the password field. Testing on Debian 10, either way it's possible to log in with SSH using a keypair. So I'm guessing this gets overridden by PAM setup. Does anyone have a better insight into this. Tim -- Next meeting: BEC, Bournemouth, Tuesday, 2020-02-04 20:00 Check to whom you are replying Meetings, mailing list, IRC, ... http://dorset.lug.org.uk/ New thread, don't hijack: mailto:dorset@mailman.lug.org.uk