Disable User Logins - NexonHost.com

How To Disable User Logins On Linux1. OverviewIn this tutorial, we will cover the various methods used to block user logins on Linux and their differences. 2. The nologin CommandWe can use the nologin command to prevent a user from logging in. It prints a message and exits with a non-zero status code to indicate failure. We can change a user’s login shell with the usermod command’s -s flag.As an example, let’s use it to prevent a user called baeldung from logging in:$ sudo usermod baeldung -s /sbin/nologin $ sudo su - baeldung This account is currently not available.Now, if we try to use su to log into the account, we see an error indicating that logins have been disabled.We can also modify the error message by modifying the /etc/nologin.txt file: $ echo "Hi, logins have been disabled for your account. Please contact your system administrator for more information" | sudo tee /etc/nologin.txt $ su - baeldung Hi, logins have been disabled for your account. Please contact your system administrator for more information 3. The false CommandThe false command is a simple command we use to return a non-zero status code indicating failure. Let’s run it and check its status code:$ false $ echo $? 1false is the opposite of the true command, which always returns a zero status code, indicating success:$ true $ echo $? 0We can use them in Bash while statement to repeatedly execute code:while false; do echo "This code will never run!" done while true; do echo "This code will run forever!" doneThe first code block is never executed since false always indicates failure, while true always indicates success:$ ./script This code will run forever! This code will run forever! This code will run forever! ...While it is not the false command’s primary purpose, we can still use it for preventing user logins, just like we did with the nologin command. However, false does not print an error message and immediately exits the shell, which can cause confusion: $ sudo usermod baeldung -s /bin/false $ sudo su - baeldung $ echo $? 1This means that we cannot customize error messages as we did with nologin in the previous section. 4. The passwd CommandWe can use the passwd command’s -l flag to lock a user account, preventing logins:$ sudo passwd -l baeldung passwd: password expiry information changed. $ su - baeldung Password: su: Authentication failureNow when we try to login, su will treat all passwords as invalid. We can unlock the account with sudo passwd -u baeldung. This method is similar to the false command since it doesn’t allow us to display a descriptive message. 5. The usermod CommandSimilar to the passwd command, we can use the usermod command with the -L or -U flags to lock/unlock a user account:$ sudo usermod -L baeldung $ su - baeldung Password: su: Authentication failure $ sudo usermod -U baeldung $ su - baeldung Password: $ echo $? # Success 0 6. ConclusionIn this article, we learned about various commands used to block user logins on Linux and their differences. Usually, the nologin command is preferred to other methods like false or passwd since it allows us to set a custom message explaining why the account was locked.

Bare Metal

Servers

Storage

Virtual Servers

Linux VPS

Unmetered Linux VPS

Windows VPS

Unmetered Windows VPS

Storage VPS

OpenClaw Hosting

Remote Protection

Website DDoS Protection

Remote DDoS Protection License

Colocation

Server Colocation

Management

Infrastructure Management

Cloud Hosting

Magento Pro Hosting

OpenCart Hosting

Reseller Pro Hosting

PrestaShop Hosting

WordPress Pro Hosting

Web Hosting

Netherlands

Romania

Germany

Tag Archives: Disable User Logins

Recent Posts

Categories

Follow us

Our Products

Dedicated Servers

Compare us with Competitors

Quick Links

Newsletter