Id disabled but has a valid shell

[Tison]

I have seen this message on my security report ;
"Login Id lpd is disabled but still has a valid shell"
What does it mean and how do I fix it ?

 

[AIXSPadmin]

This means the user lpd, which has been diabled still has a shell (i.e., csh, bsh, ksh) as the initial program. In smitty user you can change the initial program to nothing, which is how we have it setup. Also, /etc/shells is the files that lists valid shells to use, therefore, you cannot change lpd's shell to /dev/null.

 

[AIXSPadmin]

This is what you will get if you try to change the shell to /dev/null:

COMMAND STATUS

Command: failed stdout: yes stderr: no

Before command completion, additional instructions may appear below.

3004-703 Check "/etc/security/login.cfg" file.
3004-692 Error changing "shell" to "/dev/null" : Value is invalid.