> [...] and must be using a shell listed in /etc/shells.

Only tangentially related...but why is NetBSD still using /etc/shells,
or more precisely, getusershell()?  It's fundamentally broken in at
least two ways.  (The design is broken, because the API assumes the
list of acceptable shells is enumerable and comparatively small; the
usage is broken, because it confuses "user with this shell may use ftp"
with "user may chsh to this shell" with "user with this shell is
capable of executing more-or-less arbitrary commands" with any of the
dozens of other things getusershell() is abused to test for.)

					der Mouse

			       mouse@rodents.montreal.qc.ca
		     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B