Set the password hash to 13 * using vipw(8) or usermod -p. I wonder if we document that somewhere.
On 26 September 2022 20:27:07 CEST, Federico Giannici <[email protected]> wrote: >I have a login that I want to be able to access only via ssh with a >certificate (in ~/.ssh/authorized_keys). > > >So I have disabled the password ('*') but left a valid shell. Something like >this in /etc/master.passwd: > >mylogin:*:1001:1001::0:0:My login:/home/mylogin:/bin/sh > > >But in this way every day a receive a mail with the following: > >Checking the /etc/master.passwd file: >Login mylogin is off but still has a valid shell and alternate access files in >home directory are still readable. > > >What is the supposed way to define an account without a password but with a >valid shell (to access via ssh with a certificate)? > >Thanks. > -- Sent from a mobile device. Please excuse poor formatting.

