Andrei Popescu wrote the following on 24.07.2008 18:28

</snip>


<--------------- man 1 passwd -------------
-l, --lock
Lock the named account. This option disables an account by changing
the password to a value which matches no possible encrypted value,
and by setting the account expiry field to 1.
--------------------------------------------->


> Interesting, the manpage passwd(1) says that 'passwd -l' should also set
> account expiry to 1, but it doesn't. Either passwd or the manpage is
> wrong, so I think this should be reported against the package passwd.
>
> Regards,
> Andrei

well here it does. Tested with both Debian lenny and Ubuntu hardy.
Which version do you use?

If you have a locked account without that expiry and use either of the above
just 'lock' that account again and then take a look at /etc/shadow.

--
bye Thilo

key: 0x4A411E09


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Thu,24.Jul.08, 18:47:20, Thilo Six wrote:

> well here it does. Tested with both Debian lenny and Ubuntu hardy.
> Which version do you use?

I'm not the OP.

Regards,
Andrei
--
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)

Andrei Popescu wrote the following on 24.07.2008 22:04


>> well here it does. Tested with both Debian lenny and Ubuntu hardy.
>> Which version do you use?
>
> I'm not the OP.
>
> Regards,
> Andrei

I think that doesn't matter in this regard. You have said your passwd doesn't
behave as mentioned in the manpage, which would be clearly a bug.
I said i can reproduce exactly the behaviour mentioned in manpage and
therefore seeking for an explanation of that divergence which resulted in the
question which version you use.

--
bye Thilo

key: 0x4A411E09


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Jul 24, 6:50*pm, Thilo Six <T....@gmx.de> wrote:
> well here it does. Tested with both Debian lenny and Ubuntu hardy.
> Which version do you use?
>
> If you have a locked account without that expiry and use either of the above
> just 'lock' that account again and then take a look at /etc/shadow.

I'm on Lenny:
klingon:/home/alieno# dpkg -l *passwd*|grep ^ii
ii base-passwd 3.5.17
ii passwd 1:4.1.1-2

I previously fixed it using "usermod -L" as suggested by
Sven Joachim, and it was working fine:

alieno@klingon:~$ sudo su
klingon:/home/alieno# passwd -S root
root L 07/23/2008 0 99999 7 -1
(no warnings and cronjobs ok)

klingon:/home/alieno# passwd -l root
Password changed.
klingon:/home/alieno# passwd -S root
root L 07/23/2008 0 99999 7 -1
klingon:/home/alieno# head -1 /etc/shadow
root:!$1$MwKDBs6O$H.ZfnYq7C.xzVUdHRmwL31:14084:0:9 9999:7::1:

So the "passwd -S" output is the same. But:

klingon:/home/alieno# exit
alieno@klingon:~$ sudo su
Your account has expired; please contact your system administrator
su: User account has expired
(Ignored)
klingon:/home/alieno# head -1 /etc/shadow
root:!$1$MwKDBs6O$H.ZfnYq7C.xzVUdHRmwL31:14084:0:9 9999:7::1:

and from syslog:
Jul 24 22:44:01 klingon CRON[4998]: User account has expired

klingon:/home/alieno# passwd
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
klingon:/home/alieno# passwd -S root
root P 07/24/2008 0 99999 7 -1
#klingon:/home/alieno# head -1 /etc/shadow
root:$1$0pbophfn$B3EpqcFkcezuOYY1D6mNr/:14084:0:99999:7::1:
klingon:/home/alieno# exit
alieno@klingon:~$ sudo su
Your account has expired; please contact your system administrator
su: User account has expired
(Ignored)

Locking back with usermod doesn't work anymore!
klingon:/home/alieno# usermod -L root
klingon:/home/alieno# head -1 /etc/shadow
root:!$1$b/Xw.zn6$qMfTmi6zbxeM2nWIDqgMR.:14084:0:99999:7::1:
klingon:/home/alieno# passwd -S root
root L 07/24/2008 0 99999 7 -1
klingon:/home/alieno# exit
alieno@klingon:~$ sudo su
Your account has expired; please contact your system administrator
su: User account has expired
(Ignored)

(and of course root cronjobs not working anymore)

It works if i do
klingon:/home/alieno# passwd -u root
klingon:/home/alieno# passwd -S
root P 07/24/2008 0 99999 7 -1
klingon:/home/alieno# head -1 /etc/shadow
root:$1$b/Xw.zn6$qMfTmi6zbxeM2nWIDqgMR.:14084:0:99999:7:::
klingon:/home/alieno# usermod -L root
klingon:/home/alieno# passwd -S
root L 07/24/2008 0 99999 7 -1
klingon:/home/alieno# head -1 /etc/shadow
root:!$1$b/Xw.zn6$qMfTmi6zbxeM2nWIDqgMR.:14084:0:99999:7:::
klingon:/home/alieno# exit
alieno@klingon:~$ sudo su
klingon:/home/alieno#

and cronjobs are running ok


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Thu,24.Jul.08, 22:35:01, Thilo Six wrote:
> Andrei Popescu wrote the following on 24.07.2008 22:04
>
>
> >> well here it does. Tested with both Debian lenny and Ubuntu hardy.
> >> Which version do you use?
> >
> > I'm not the OP.
> >
> > Regards,
> > Andrei
>
> I think that doesn't matter in this regard. You have said your passwd doesn't
> behave as mentioned in the manpage, which would be clearly a bug.

I never said *my* passwd doesn't lock, but the OP confirmed that his
doesn't but usermod does. I just tested and on my machine 'passwd -l'
and 'usermod -L' have the same effect, at least in the /etc/shadow file.

Regards,
Andrei
--
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)

Alexander Fortin wrote the following on 24.07.2008 23:09

</snip debug>

hi

want to comment on the bugreport be my guest:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

--
bye Thilo

key: 0x4A411E09


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org