Hi, > The password would have to be NULL to disallow further login, is that > what your other series will allow to do?
Disallow logins can be done using "expire-password vnc now". I think having multiple ways to archive the same thing is a bad idea from a security point of view, so I'd suggest to not touch the behavior of the various set-password command variants. cheers, Gerd