Security Basics mailing list archives

Re: What's the difference between !! and * at /etc/shadow file?


From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Fri, 13 May 2005 16:19:24 +0200

On 2005-05-12 Monty Ree wrote:
I have found that  !! and * exist at /etc/shadow file.
and I know that !! is inserted when I lock the user,then what's the 
difference with * ?
Some user is !! but others * at shadow file like below..

daemon:*
sshd:!!:

It's just a single '!'.

* -> User cannot login by password (may login by other means like
     ssh-key).
! -> User cannot login at all.

See man-page of adduser. "--disabled-password" creates '*',
"--disabled-login" creates '!'.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


Current thread: