dictator at keep:~$ getent passwd | grep ldap-connect ldap-connect:*:10000:513:::/usr/sbin/nologin dictator at keep:~$ getent passwd ldap-connect ldap-connect:*:10000:513:::/bin/sh How do I make that shell is always /usr/sbin/nologin for ldap-connect?