[chef] Re: Re: Re: Re: Re: Re: Removing root's password results in 'ruby-shadow not installed' error.

["Jason J. W. Williams" < >]

> Are you install Chef from gems or debs?

Debs.

> I suppose you could set the password to "*" using the password
> attribute. Since we're normally writing directly to this field through
> the shadow library, that may work.

Setting the password attribute to "*" is what appears to trigger the
issue. Locking the account works fine though.


> Please keep in mind that neither of these options prevent login to an
> account on Linux, they only prohibit login using a password. Often
> people disable root login via ssh in the sshd_config and delete other
> users when they are no longer needed. Alternately you could expire the
> account (chage -E 1 user)

Root login is also disabled in sshd_config. The goal is to prevent
login with a password to the root account. If a privileged user
becomes root that's acceptable. Just getting rid of direct
password-based login to the account.

Thank you for your help.

-J