Russ supplied a patch to allow update-passwd to use debconf for prompting, which I've now merged after some tweaking between us. As of base-passwd 3.5.30, all these accounts will have their shells changed to /usr/sbin/nologin, with debconf prompts at priority medium defaulting to true. Thanks, Russ! -- Colin Watson [cjwatson@debian.org]