sshd: it is permit to login with a Empty Password
Tomas Mraz
tmraz at redhat.com
Thu Nov 25 08:01:32 UTC 2004
On Wed, 2004-11-24 at 23:03 +0100, Dario Lesca wrote:
> On a standard installation of FC1 and FC2 (and FC3?) is permit to login
> with a user with a empty password ... is this correct?
This is fixed in FC3.
> How to disable this "feature"?
Remove:
auth required pam_stack.so service=system-auth
from /etc/pam.d/sshd and replace it with auth lines
from /etc/pam.d/system-auth except with removing nullok option of
pam_unix.so
Or rebuild pam...src.rpm from FC3 on your FC2/1 and install it.
--
Tomas Mraz <tmraz at redhat.com>
More information about the fedora-devel-list
mailing list