From 6d44670b928bb0a25fc13236df9c9903926a857e Mon Sep 17 00:00:00 2001 From: troup <> Date: Mon, 9 Apr 2007 19:54:29 +0000 Subject: [PATCH] '*PK*' will allow a 'locked' account to login in certain situations, remove it for now. We still need a way to disable accounts but not mail, but this isn't it. --- ud-generate | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/ud-generate b/ud-generate index 03a5186..f7c929e 100755 --- a/ud-generate +++ b/ud-generate @@ -180,8 +180,7 @@ def GenSSHShadow(l,File): # If the account is locked, do not write it. # This is a partial stop-gap. The ssh also needs to change this # to ignore ~/.ssh/authorized* files. - if (string.find(GetAttr(x,"userPassword"),"*LK*") != -1) \ - or (string.find(GetAttr(x,"userPassword"),"*PK*") != -1): + if (string.find(GetAttr(x,"userPassword"),"*LK*") != -1): continue; if x[1].has_key("uidNumber") == 0 or \ -- 2.20.1