[Adduser-devel] Bug#308881: --disabled-password writes ! in /etc/shadow

Marc Haber Marc Haber <mh+debian-packages@zugschlus.de>, 308881@bugs.debian.org
Fri, 13 May 2005 13:43:25 +0200


On Fri, May 13, 2005 at 01:54:53PM +0300, Shaul Karl wrote:
> On Fri, May 13, 2005 at 07:44:19AM +0200, Marc Haber wrote:
> > severity #308881 minor
> > tags #308881 confirmed pending
> > thanks
> > 
> > Hi,
> > 
> > On Fri, May 13, 2005 at 02:19:47AM +0300, Shaul Karl wrote:
> > >     adduser --system --disabled-password testuser
> > > 
> > > writes ! in the encrypted password field of /etc/shadow
> > 
> > This is the intended behavior
> 
> 
>   adduser --system --disabled-password testuser
> 
>     and
> 
>   adduser --system --disabled-login testuser
> 
> both writes ! in the encrypted password field of /etc/shadow.

--system always uses --disabled-login implicitly. This is clearly
documented.

> Is that the intended behavior?

For system users, yes.

> In this case there is no distinction between
> --{disabled-password,disabled-login}, is there?

For system users, there isn't.

>   The way I interpret the OPTIONS sections of the man page,
> --disabled-login should have a stronger effect then --disabled-password:

Yes, for normal users.

>   Shouldn't --disabled-login use '!' and --disabled-password use '*'?

It does. For normal users.

> -SSH RSA keys, but not using password authentification.
> +SSH RSA keys, but not using password authentication.

Committed to svn, thanks.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835