<![CDATA[Admin Account Disabled, can still use credentials for SSH Access]]>Hi Guys,

I have come across a strange problem using pfsense version 2.2.6. I have disabled the Admin account wanting to secure the pfsense by user in FreeRadius using mOTP which is working fine. So i disable the admin account and tested webgui access which now fails as expected. However i am still able to access the LAN address via SSH using the admin credentials, is this the correct behaviour?

Thanks in advance, i hope someone may shed some light on why this is happening.

Regards
Darren

]]>https://forum.netgate.com/topic/94969/admin-account-disabled-can-still-use-credentials-for-ssh-accessRSS for NodeSat, 17 Oct 2026 09:49:45 GMTTue, 02 Feb 2016 15:20:50 GMT60<![CDATA[Reply to Admin Account Disabled, can still use credentials for SSH Access on Tue, 09 Feb 2016 16:22:44 GMT]]>Sincere apologies for the late response,

The device is not yet in production, so i will test disabling the FreeRadius and again disabling the admin account and test SSH, will let you know the outcome.

Thanks for your support it is appreciated.

Regards
Darren

]]>https://forum.netgate.com/post/601575https://forum.netgate.com/post/601575Tue, 09 Feb 2016 16:22:44 GMT<![CDATA[Reply to Admin Account Disabled, can still use credentials for SSH Access on Tue, 02 Feb 2016 19:17:38 GMT]]>If you configured pfSense to use FreeRADIUS for GUI auth, the local admin user is kept enabled as a failsafe, IIRC. In case the RADIUS server is unreachable so you still have a way in.

I'd have to check the code but I seem to recall that the account disable part was only honored when using local auth.

]]>https://forum.netgate.com/post/600138https://forum.netgate.com/post/600138Tue, 02 Feb 2016 19:17:38 GMT