[Freeipa-users] deny to change shell

[Ivars Strazdiņš]

Hi,
just another basic question, I am sorry to spam the list.
Noticed that regular users can change their login shell in account settings.
Is it possible to lock login shell property for a regular user?
For a unix system, using standard PAM authentication, use of chsh command can be restricted.
I could not find anything regarding this in IPA manual.

With kind regards,
Ivars

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150602/8c241131/attachment.htm>