[techtalk] login restriction

[Brian Sweeney]

Hello all-

Does anyone know how to restrict users on a RHL 6.0 box from being able to
actually login?  I know this sounds strange, but hear me out.  I have this
new mailserver up, and I want people to be able to POP to it to retrieve
mail, but not anything else.  I had thought the way to do this was through
the /etc/security/access.conf, and indeed that file seems to say that's what
it's for, yet when I add a rule to it like:

-:username:ALL

that user can still login.  Any ideas?

Thanks,
Brian

PS-If I could at least make it so that they couldn't login via telnet, THAT
would be a big help...