[SunHELP] Difference between NP and *LK* in shadow file

Thank you for all of the responses, but I should have stated in my first
post that I know that *LK* means locked and NP means No Password. I should
have clarified that the information that I'm interested in has more to do
with security and usability. We have certain applications that require a
Solaris userid to run, but no one will ever actually log in as this
particular user. Is it more accepted to input a NP in the password field of
/etc/shadow or to lock the account by using the 'passwd -l' option?

I'm not sure, but many of you might be running the Sun NetConnect for
monitoring your systems. Prior to the install, you must create a userid for
NetConnect so that any processes not needing root privilege will run as the
newly created user. The install directions say not to lock the account, but
essentially disable the login ability by using NP in the password field.

These directions from Sun prompted my boss to ask me the difference in *LK*
and NP.

Thanks again for all the responses so far.

Matthew Simoncini
Unix Administrator
Boston Scientific / Accenture

> -----Original Message-----
> From: Dale Ghent [mailto:daleg at elemental.org]
> Sent: Monday, April 28, 2003 2:10 PM
> To: Simoncini, Matthew
> Cc: 'sunhelp at sunhelp.org'
> Subject: Re: [SunHELP] Difference between NP and *LK* in shadow file
> 
> 
> On Monday, Apr 28, 2003, at 11:56 US/Eastern, Simoncini, 
> Matthew wrote:
> 
> > Hello gurus,
> >
> > I may be showing my ignorance on this question, but what's the 
> > difference
> > between NP and *LK* in the shadow file? I'm just shooting this 
> > question off
> > quickly because someone asked me and I don't have the time 
> to research 
> > it,
> > but knew someone here would have the answer.
> 
> *LK* means that the account is "locked" or disabled.
> 
> This is the default state for a newly created account until a new 
> password is set, or when an account is locked via the usermod utility.
> 
> /ek
> http://elektronkind.org/