Probably it is ok to remove nullOK? Is it just the thing that allows users to register without a password? what is

use_authto k

in your file Kastus? a typo or error mine doesn't have that... actually on the redhat i used bastille which made these changes don't think I have that option here so was trying to do more or less the same thing manually... Susan

#%PAM-1.0 auth requisite pam_unix.so nullok #set_secrpc auth required pam_securetty.so auth required pam_nologin.so #auth required pam_homecheck.so auth required pam_env.so auth required pam_mail.so account required pam_unix.so password required pam_pwcheck.so nullok password required pam_unix.so nullok use_first_pass use_authto k session required pam_unix.so none # debug or trace session required pam_limits.so

That might explain why your changes are ignored.

Regards, -Kastus