I do not want dialup users to login with /bin/bash then I put
/bin/false in the password file for each one.
In linux redhat 7.1

user:x:1000:1000:description:/home/user:/bin/false

But if I set this way module unix do not give access.
(with /bin/bash all runs right the user can do dialup)

I heve searched the list Iand found two ways:
1add false as shell
 echo /bin/false >> /etc/shells
It runs well still when the /bin/false does not exist

2 touch pam authentication commenting a required
#auth       required

is any of both seccure ?
do you know another shape to do it ?


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to