I see that /bin/false is not a valid shell by default on CentOS. It is f.i. on Suse. /bin/false is present, though. Is there a security reason for this? man says that nologin gives feedback that the account is not available while false just exits false. Anything against just adding /bin/false to /etc/shells? Kai -- Kai Sch?tzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com