SUMMARY:Opsyslogin unusable with OPENLINK

This summary relates to an old thread on which I promised to summarise for others with the same problem. Apologies for delay. Problem: Opsyslogin set to Y on Openlink broker causes all sessions to be rejected complaining about pseudoaccount login rejected. Openlink will only work with opsyslogin (and consequently security) turned off. It has taken three months to get an answer on this out of Openlink which is quite disappointing particularly as it appears to have been a known problem. The problem relates (on Solaris platform anyway, can't speak for others.) to the setup of the file /etc/shells. this is used by ftp to valid login shells for users. A full discussion is available from 'man ftpd' If this file exists it must be correctly set up with the valid shells fully pathed; ie '/bin/ksh', not just 'ksh'. The latter will cause Openlink to fail. Ironically if the file does not exist Openlink will work correctly as it will use a series of defaults (see 'man ftpd'). I am advised that in addition to causing Openlink to fail; these kinds of incorrect settings in /etc/shells can result in a security risk as any executable program called 'ksh' would in this instance have been recognised by ftp and validated. rgds -- -- Peter Tashkoff <tashkop@kiwi.co.nz> NZ Kiwifruit Marketing Board My opinions are my own; not those of my Employer. This posting may not be used by any party to vilify another.