On Tue, Sep 11, 2012 at 03:47:57AM -0400, Ted Unangst wrote:
> On Mon, Sep 10, 2012 at 17:01, Antoine Jacoutot wrote:
> 
> > In effect locking/unlocking the password means to add a '!' in front of
> > the encrypted entry in master.passwd.
> > Note that this disable the _password_ not the account of course (you
> > could still connect using ssh+key for e.g.).
> 
> I am very concerned that this violates the principle of least surprise.

Stuart proposed that my diff appends/remove '-' from the user shell.
I think this is a good idea, I'll send another diff later.

-- 
Antoine

Reply via email to