We want to remove the password usage on a UNIX system.
The users should only log in with SSH key. Not password.
So their password field in the /etc/shadow file will be "*" and set their password to never expire. (because if sshd_config has UsePAM yes and the password that doesn't exists expires.. that means the user cannot input the old password after the pwd expires..)
The question: doing this is safe? The only problem we can see that if a user has sudo permissions for a command, then it will need to have the "NOPASSWD" set in sudo, since the users pwd has to be given if using sudo
What other problems could be there (that the users pwd is "*")?