-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 24 Dec 2002, David Stephen wrote:

> When installing certain applications, such as diald and postgres, the
> instructions recommend running them with a purpose established user/group
> like postgres/postgres.
> 
> I presume that these should be setup without a password but I can't figure
> out how to do this with shadow passwords enabled.

Not so much "without a password", but they shouldn't be able to be used to
log in to the machine. A null password would allow the account to be used
by anyone who could connect to your machine, which is Bad.

You should lock the account, which effectively sets a password which can
never be correctly supplied. You can do this with `usermod -L <username>`
(without quotes) replacing <username> with the account name you wish to
lock.

See usermod(8) for more information.

- -- 
"I know of no technological device at this time that would [prevent
piracy] and if it did exist, it would only be a matter of days before the
[..] manufacturers would have an override piece of equipment on their
machine and you would start from ground zero again."
   -- Jack Valenti, President of the MPAA (1982)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Made with pgp4pine 1.75-6

iD8DBQE+B209T21+qRy4P+QRAqkYAJ9NX7OdeGMVjqoGcgolVxHl0KLa7QCdEEdI
fo5HGr23WmlUFsHXI5yH4oA=
=tV9w
-----END PGP SIGNATURE-----


Reply via email to