On Tue, Sep 11, 2012 at 03:47:57AM -0400, Ted Unangst wrote: > On Mon, Sep 10, 2012 at 17:01, Antoine Jacoutot wrote: > > > In effect locking/unlocking the password means to add a '!' in front of > > the encrypted entry in master.passwd. > > Note that this disable the _password_ not the account of course (you > > could still connect using ssh+key for e.g.). > > I am very concerned that this violates the principle of least surprise.
Well I can extend the man page accordingly if you want. But I mean it has the same result as using vipw(8). Disabling a password has always been different than disabling an account. -- Antoine
