[SunHELP] Difference between NP and *LK* in shadow file

[stephen price]

Can you elaborate on what version of Solaris you saw
this happen, as well as maybe drill down to what
patch??

Thanks!
Steve

> Just recently ssh stopped trusting dsa keys between
> two of our systems. It
> turned out a Solaris 8 patch had been applied
> recently which changed the
> default behavior of the PAM libraries. We had
> accounts with "*LK*" because we
> required users to use sudo to become these users,
> there was no password.
> 
> Turns out as of late, Sun made a change so that *LK*
> no longer behaved the
> same as NP. Now *LK* means that the account is
> "truly" locked. Changing this
> field to NP fixed our problem.
> 
> --Buddy


__________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo.
http://search.yahoo.com