Hmm. Would /bin/false give you better feedback as to why the login is
failing? I suppose no feedback is more secure, but I was debugging CVS
and yeesh, what a mess.

On Thu, 9 Jun 2005, matthew sporleder wrote:

> I don't think a default fallback shell would be very secure.  (unless
> it was /bin/false)
>
> On 6/9/05, Hisashi T Fujinaka <htodd@twofifty.com> wrote:
>> I was recompiling some things in pkgsrc and my shell, tcsh, was missing.
>> Trying to use ssh gave me an odd prompt, just:
>> Password:
>>
>> What I expected was to see:
>> Enter passphrase for key ...
>>
>> Or even:
>> htodd@machine's password:
>>
>> I had the default pam configuration.
>>
>> None of my passwords worked (or did work, but were refused because I had
>> no shell, I don't know.)
>>
>> I figured out what was wrong after trying to log in at the console and
>> getting an error message there.
>>
>> Is this the proper behavior?
>>
>> --
>> Hisashi T Fujinaka - htodd@twofifty.com
>> BSEE(6/86) + BSChem(3/95) + BAEnglish(8/95) + MSCS(8/03) + $2.50 = latte
>>
>

-- 
Hisashi T Fujinaka - htodd@twofifty.com
BSEE(6/86) + BSChem(3/95) + BAEnglish(8/95) + MSCS(8/03) + $2.50 = latte