[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: securing pop3



Janus N. Tøndering wrote:
On Tue, 2003-02-11 at 19:30, Ross Currie wrote:

quite right.
You'll want to put something like /bin/false in your passwd file as the user's
shell.


Both /bin/false and /bin/true has been suggested. Any difference in
using the two?


/bin/false returns false, while /bin/true returns true. If you want to generate an error to the client, use /bin/false, but if you want 'exit 0' behaviour, then use /bin/true.

I, personally, use /bin/false.

(you can also use /usr/bin/passwd, and an authenticated ssh session will prompt for the old password again, and then allow a user to change it)

which is nice.
-g

--
Glen Mehn	glen@burningman.com
"if you ever swallow the universe, remember to spit the dragon
	back out.xx.		--swan



Reply to: