[SunHELP] Difference between NP and *LK* in shadow file

As mentioned below, it was Solaris 8.

As for which patch, you will have to go check. It's in one of the most recent
Recommended patch clusters ...

--Buddy

-----Original Message-----
From: stephen price [mailto:sd_price at yahoo.com]
Sent: Tuesday, April 29, 2003 11:33 AM
To: Lumpkin, Buddy
Cc: sunhelp at sunhelp.org
Subject: RE: [SunHELP] Difference between NP and *LK* in shadow file


Can you elaborate on what version of Solaris you saw
this happen, as well as maybe drill down to what
patch??

Thanks!
Steve

> Just recently ssh stopped trusting dsa keys between
> two of our systems. It
> turned out a Solaris 8 patch had been applied
> recently which changed the
> default behavior of the PAM libraries. We had
> accounts with "*LK*" because we
> required users to use sudo to become these users,
> there was no password.
>
> Turns out as of late, Sun made a change so that *LK*
> no longer behaved the
> same as NP. Now *LK* means that the account is
> "truly" locked. Changing this
> field to NP fixed our problem.
>
> --Buddy


__________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo.
http://search.yahoo.com