[plug] telnet server question

[Craig Ringer]

> That's right... I think it'd take the window manager to handle that
> gracefully... 

IMHO, the function would ideally be integrated into the login manager. 
That way, it allows the user to authenticate, then checks to ensure that 
the shell is in the list of allowed login shells. If it is not, the 
login manager never even starts a single process under the authenticated 
user, but instead informs them that their account is disabled.

Ideally this would be a final pre-login check done in (say) gdm.

Actually, this is how SCO OpenServer handles it, so it can't be that hard!

Craig Ringer