passwd a hviezdicka

[Marek Jaros]

On Tue, Sep 18, 2001 at 09:01:27AM +0100, Jan Havlicek wrote:
> Michal Vymazal wrote:
> > 
> > Marek Jaros wrote:
> > >nemaji v ~/.ssh soubor autohorized_keys?
> > >potom by jim teoreticky stacilo vlastnit privatni klic.
> > >
> > Ja bych tu hvezdicku nepsal do /etc/passwd , ale do /etc/shadow:-)
> > Ale ted vazne. Pokud jde o to, aby si uzivatel nezavolal shell (kteryzto
> > asi pro prihlaseni do konzole potrebovat bude), zkusil bych do
> > /etc/passwd dat toto:
> > navsteva:x:1001:100:navsteva:/home/navsteva:/bin/false
> > 
> > uzivatel navsteva ted muze napriklad k poste, ale po login nedostane
> > zadny shell a system je okamzite "odloguje".
> 
> *** Ani toto neni zcela dokonale. Pres ssh si ten shell klidne zavolaji
> a shell z passwd se vubec neuplatni, viz. man ssh

s tim bych si dovolil nesouhlasit, je pravda ze man sshd pise:
                                                       ^
~~~ cut ~~~
     When a user successfully logs in, sshd does the following:

           1.   If the login is on a tty, and no command has been specified,
                prints last login time and /etc/motd (unless prevented in the
                configuration file or by $HOME/.hushlogin; see the FILES sec-
                tion).
...
...
           9.   Runs user's shell or command.
~~~ end ~~~

ale realizuje se to tak ze command je predan shellu jako parametr, takze:
ssh navsteva na host command

spusti:
$user_shell command

kde $user_shell je shell z password_file a zalezi na $user_shell jak argument
zpracuje

	jam

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I'm not designed for M$ WindowsVC
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~