login.cfg and ODM

Hello

I can not choose /usr/bin/false for user's shell login
because it is not in /etc/security/login.cfg.
should I add it directly to file or I should use smith or chfs.
and what will be the command if I should do it through command.

I know that it is the best practice to modify almost
every thing through smith, but was wondering if there is
any way to find out which file is safe to edit manually.
I mean how do I know that object is in ODM ?

Thanks

Relevant Pages