🚀 go-pugleaf

Our serverhost is one which some users are not allowed to login.  Those
users are allowed to login to all other hosts in our domain.  We do this by
setting up NIS netgroups.  On the restricted host we have at the end of
/etc/passwd:

	+::0:0:::/bin/restricted

which prints a message telling them they cannot login to this restricted
host, and exits.  On all of the other machines we have

	+::0:0:::

which lets those users a local login.

If such a restricted user on that host has a .fingerrc file, all they get
when anyone fingers them is the output from /bin/restricted, because that is
the shell that is exec-ed in the maybe_exec_as_user() function.  I had to
hack it so that if they have a restricted shell, but are valid uses on our
system, and have a .fingerrc file, finger will at least execute /bin/sh for
their .fingerrc.

Erez.