Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uunet!mcsun!hp4nl!orcenl!hbergh
From: hbergh@oracle.nl (Herbert van den Bergh)
Newsgroups: comp.unix.aix
Subject: how can I disable a login?
Keywords: login chuser telnet?
Message-ID: <954@nlsun1.oracle.nl>
Date: 12 Sep 90 21:52:08 GMT
Organization: Oracle Europe, The Netherlands
Lines: 22

I tried to disable login to a user on AIX 3.1 9021 with the 3001 update
(does that make it 9030?).
I used the command "chuser login=false user".
Then I set the password to nothing, so anyone that logs in to his own
account could su to that user without typing a password.

The problem is that now everyone can still login to the "disabled"
user, without a password!

It seems to occur on telnet or rlogin connections only. When trying to
login on a serial tty, the login fails as expected.

My workaround in .profile of the disabled user:

	test `logname` = user && exit

Did I do something wrong, or was it IBM?

-- 
Herbert van den Bergh, ORACLE Europe	hbergh@oracle.nl, hbergh@oracle.com
Rijnzathe 6, NL-3454 PV De Meern	uunet!mcsun!orcenl!hbergh
Phone: +31-3406-94211