Issue #219 has been updated by Matthew Buckett.

Nigel Kersten wrote:
> In the absence of any evidence of systems where you can't lock an account by 
> setting the password hash to a special character, I'm closing this. (I've 
> used this functionality on a lot of *nixes)

But doesn't locking the account (eg using passwd -l on linux) have the 
advantage that you can unlock the account again and you don't have to know the 
password?

----------------------------------------
Feature #219: user type could be used to lock account
https://projects.puppetlabs.com/issues/219#change-96745

* Author: Redmine Admin
* Status: Rejected
* Priority: Low
* Assignee: 
* Category: user
* Target version: 
* Affected Puppet version: 
* Keywords: communitypatch
* Branch: 
----------------------------------------
User type could easely add locking capability by using:

ensure => locked

This will password lock the account and synonym for present+lock. This kind of 
users could only login with sshkey or other non-password means and be sure that 
it is enforced that way.

This is enforced by 

passwd -l  login  ( on debian at least)
pw user mod -h - -n login  ( on freebsd )



regards,
Ghislain.



-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to