disabled account accepting publickey authentication

From: Brian Whitehead (brian@whiteheadconsulting.com)
Date: 01/06/03

  • Next message: Richard E. Silverman: "Re: disabled account accepting publickey authentication" 
    From: brian@whiteheadconsulting.com (Brian Whitehead)
Date: 5 Jan 2003 19:33:07 -0800

    I've found that an system account that I had disabled has been able to
    authenticate with a ssh publickey. I have a script that has been
    using rsync via ssh for some time using this disabled account. Can
    anyone verify for me whether this is a bug or a feature? To me it
    seems to be a bug. Is there a server setting to disable this? I am
    using version 3.1p1 on Redhat 7.3 on both the client and the server.

    Any information on this will be greatly appreciated.