Hi Ralph

On 06/02/2020 22:47, Ralph Corderoy wrote:
Hi again Tim,

https://arlimus.github.io/articles/usepam/ is relevant; sshd's ‘UsePAM’
configuration.



Yes, I think that's a pretty good synopsis of the situation.

I believe that setting the account expiry date is the definitive way to lock an 
account from both interactive logins and SSH public keys, as you mentioned. 
Easiest way is

sudo chage -E0 username

and to unlock

sudo chage username



Cheers

Tim

--
 Next meeting: BEC, Bournemouth, Tuesday, 2020-02-04 20:00
 Check to whom you are replying
 Meetings, mailing list, IRC, ...  http://dorset.lug.org.uk/
 New thread, don't hijack:  mailto:dorset@mailman.lug.org.uk

Reply via email to