Cosmin Nicolaescu on 19 Aug 2005 14:59:39 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Terminal/shell login with no password


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, August 19, 2005 11:48 am, Eric wrote:
> So, we're really talking about login not requiring
> a password for _some_ user accounts.
>
> I tried on my SuSE system to have an account with
> null /etc/password and /etc/shadow entries for the
> user.  Cannot log in.  I believe PAM will be the
> solution but I'm not sure how to restrict it to a
> subset of the users.
>
> Looks like it's PAM documentation reading time for me.
> Hope it's improved since the last time I read it :-P
>
> Thanks,
> Eric
>

I'm sorry, I didn't read the whole thing correctly.

If you want it to be restrictive to some users/groups only, I recomment
taking a loot at pam_access (configuration is in
/etc/security/access.conf).

You would have to add pam_access to /etc/pam.d/login, and also edit
access.conf. I haven't tried giving users acceess with no password, but it
might work.

- From your description, why do you have to be passwordless?

If they put in their username (and password), and then the
.login/.bash_profile starts up the software, why can't they have a
password?

- -Cos

- --
GPG key fingerprint = DE9F 4664 E666 2BD1 903E  4F4D EA31 5FB1 C7F9 08C1

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDBfRL6jFfscf5CMERAmBWAJ0agBajPGNu6pgtSpTuFXVeWhmFqACg7qIS
QCyK84D2ThNSRbtskbytRGI=
=CcYX
-----END PGP SIGNATURE-----

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug