[Fedora-directory-users] solaris 10 caching credentials? Inactivated users allowed in via ssh

[Brian K. Jones]

Hi all, 

I'm running FDS (binary rpm) on rhel4. I have rhel4 and solaris 10 clients. 

If I inactivate a user account in the FDS admin GUI, then try to log in via 
ssh as that inactivated user on any ol' random Linux client, the BIND 
operation fails with err=53 (unwilling to perform). This, I should think, is 
the expected behaviour. 

Solaris 10, on the other hand, lets the user in (again, ssh). The only BIND I 
can correllate in the logs come from the solaris proxy user. Then a search is 
done for "shadowaccount=<username>", and then a search is done for the group 
memberships of that user (presumably I'm already in when this is done). 
There's never a BIND operation as the inactive user at all! 

Can someone explain what's happening?

brian.