Re: sshd: it is permit to login with a Empty Password

[Tomas Mraz <tmraz redhat com>]

On Wed, 2004-11-24 at 23:03 +0100, Dario Lesca wrote:
> On a standard installation of FC1 and FC2 (and FC3?) is permit to login
> with a user with a empty password ... is this correct?
This is fixed in FC3.

> How to disable this "feature"?
Remove: 
auth       required     pam_stack.so service=system-auth
from /etc/pam.d/sshd and replace it with auth lines 
from /etc/pam.d/system-auth except with removing nullok option of
pam_unix.so

Or rebuild pam...src.rpm from FC3 on your FC2/1 and install it.

-- 
Tomas Mraz <tmraz redhat com>