X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=vrYZ5eiRpwBBaS6H
	RCuGxzVaGbk1ftBh5Ygauygn3Bi5qH4Q2Ea1T05xXxSM/QyBZCgVsJJMwNTf+ufq
	jffVWt9oth39xyYj11OuJCXdJiqT+83rFeLHKrn5oIYnQ68+Et2BYbOqJ2ohtN0O
	eSlckK6Uq3zzo8ejIyXGzB5f1dY=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=v9zsfVk1MJ9kothQaOBimq
	7iJhY=; b=LNtXLlGAol/9T6ZgYYfH/cJLu0JvXwJ39RkuLq3ya/ZBuZCk9I1pfb
	AueRGN7dLBoN6luiSd8aWh0PWtXnqFoGAB/r9WglfKux5ejJyN4/iILeMeagGq/e
	LTCyirmCSLIQIMEVK6z459lylD4iQP5EF6wdBgwsQ/AuEc9u3cG4c=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=0.7 required=5.0 tests=BAYES_05,FREEMAIL_FROM,KAM_THEBAT,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2 spammy=separately, H*F:D*yandex.ru, english, H*UA:Bat!
X-HELO: forward102p.mail.yandex.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1548529503;	bh=bDVoYs5Ml0sm10r77lq3No1yv/7KanTAQp67POIL0ZM=;	h=Date:From:Reply-To:Message-ID:To:Subject:In-Reply-To:References;	b=uuMKNzA4GgPL/Msy2D1R4wG2FLmpBDR3/O7nodVd/hqN6axoVP7fYfsTG7gs9DZVp	 mAO7Be5S+CxhDuiS0XgylJEx79c4XcVNrGtr9S62nyqvCQHmNvOw4f263pPcL/0YUi	 0Bta2ii+4bmJhnwvszfUqrahzWiTDr1FxnEbq0Ko=
Authentication-Results: mxback6o.mail.yandex.net; dkim=pass header.i=@yandex.ru
Date: Sat, 26 Jan 2019 22:02:03 +0300
From: Andrey Repin <anrdaemon AT yandex DOT ru>
Reply-To: cygwin AT cygwin DOT com
Message-ID: <1105935204.20190126220203@yandex.ru>
To: Stefan Baur <X2Go-ML-1 AT baur-itcs DOT de>, cygwin AT cygwin DOT com
Subject: Re: sshd permits logon using disabled user?
In-Reply-To: <51ded8a7-ffc0-c1b0-8bb6-8d2f5870ec68@baur-itcs.de>
References: <CANV9t=SSyof86c5Yz3tNhwj4To=eKnrmveQcr59ZmMY-X9_txA AT mail DOT gmail DOT com>   <20190124154533 DOT GK2802 AT calimero DOT vinschen DOT de>  <2b348ac3-63d1-2cd3-430d-2568d650a583 AT baur-itcs DOT de>  <20190124155918 DOT GL2802 AT calimero DOT vinschen DOT de>  <51ded8a7-ffc0-c1b0-8bb6-8d2f5870ec68 AT baur-itcs DOT de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

Greetings, Stefan Baur!

> If an admin can lock out an account (separately from disabling it
> entirely), say, by setting an initial password, checking the "user must
> change password on first login", and also checking "user is not allowed
> to change password" simultaneously (if that's possible),

Unfortunately, that's not possible.


-- 
With best regards,
Andrey Repin
Saturday, January 26, 2019 22:01:42

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple