Re: !! in /etc/shadow

[Larry Brower <larry () maxqe com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 03/22/2012 03:20 PM, Jeffrey Walton wrote:
> On Thu, Mar 22, 2012 at 4:10 PM, Stephanie Daugherty
> <sdaugherty () gmail com> wrote:
> > If I recall correctly, that means no password has been set. !! effectively
> > prevents any password from matching the hash, therefore password login can't
> > be used for the account, but depending on SSHD configuration, SSH keys
> > *might* be able to be used to log in.
> OK, thanks.
>
> The account in question (tomcat) is actually in sudoers with NOPASSWD.
> Its on a box with SE Linux, but its not enabled.
>
> Jeff
>
> > On Thu, Mar 22, 2012 at 3:29 PM, Jeffrey Walton <noloader () gmail com> wrote:
> > > Hi Guys,
> > >
> > > Does anyoneone know what causes "!!" to show up in /etc/shadow (the
> > > account is enabled and has a login shell).
> > >
> > > Jeff


!! normally shows up when the account is "locked", ie usermod -L <account>

man usermod

As previously stated they could still possibly be able to login using
ssh keys.

- -- 


Larry Brower, CCENT

Fedora Ambassador - North America
Fedora Quality Assurance
lbrower () fedoraproject org
http://www.fedoraproject.org/
-----BEGIN PGP SIGNATURE-----
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=qXTb
-----END PGP SIGNATURE-----
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.