sshd: it is permit to login with a Empty Password

Tomas Mraz tmraz at redhat.com
Thu Nov 25 08:01:32 UTC 2004


On Wed, 2004-11-24 at 23:03 +0100, Dario Lesca wrote:
> On a standard installation of FC1 and FC2 (and FC3?) is permit to login
> with a user with a empty password ... is this correct?
This is fixed in FC3.

> How to disable this "feature"?
Remove: 
auth       required     pam_stack.so service=system-auth
from /etc/pam.d/sshd and replace it with auth lines 
from /etc/pam.d/system-auth except with removing nullok option of
pam_unix.so

Or rebuild pam...src.rpm from FC3 on your FC2/1 and install it.

-- 
Tomas Mraz <tmraz at redhat.com>




More information about the fedora-devel-list mailing list