I have a user created as Non-Login and it has set of keys in the
authorized_keys.I am able to remote ssh or switch user locally as
long it matches the key in authorized_keys.

#passwd -s nluser
nluser NL

How does this NL work withkeys in the authorized_keys,while it is not
supposed to allow ssh/ftp or telnet?I also presume passwd expiry will
not have effect on this as the shadow field is set as NP

I am using solaris 10

Chimpanzee <govindo@gmail.com> writes:
>I have a user created as Non-Login and it has set of keys in the
>authorized_keys.I am able to remote ssh or switch user locally as
>long it matches the key in authorized_keys.

>#passwd -s nluser
>nluser NL

>How does this NL work withkeys in the authorized_keys,while it is not
>supposed to allow ssh/ftp or telnet?I also presume passwd expiry will
>not have effect on this as the shadow field is set as NP

ssh has numerous authentication methods. Only the one that uses
PAM cares about what is in your /etc/shadow file.

-Mike