sshd: it is permit to login with a Empty Password

[Tomas Mraz]

On Fri, 2004-11-26 at 12:54 +0100, Dario Lesca wrote:
> Il gio, 2004-11-25 alle 09:01, Tomas Mraz ha scritto:
> > On Wed, 2004-11-24 at 23:03 +0100, Dario Lesca wrote:
> > > On a standard installation of FC1 and FC2 (and FC3?) is permit to login
> > > with a user with a empty password ... is this correct?
> > This is fixed in FC3.
> 
> so this is a bug. (bad bug!), if I say "PermitEmptyPasswords no" SSHD
> must NON permit logon to user whitout a password.
> 
> is a bug of openssh or fc-openssh?
Bug in PAM.

-- 
Tomas Mraz <tmraz at redhat.com>