Inactivated account still logs in via SSH

[adam donald]

I am running OpenSSH_3.9 on HP-UX B.11.11 servers that are trusted. I am finding that inactive/disabled accounts can still log in (with password) via SSH, even though the same inactive accounts can not log in via telnet. As far as I know, SSH was complied on the systems before they were converted to trusted. Are there any ideas on how I can get SSH to observe user account status and deny disabled accounts from logging in?

[Greg Vaidman · Accepted solution]

I've seen this behavior too. See if the "UseLogin" option in sshd_config can fix this problem. Otherwise, try using a more recent ssh version.

[adam donald]

Thank you, Greg, your solution to make 'UseLogin yes' seems to work for me!