openssh unix dev - Sep 2001 - PAM overrides PermitEmptyPasswords

I noticed while investigating Debian Bug #93200
(http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=93200&repeatmerged=yes)
that sshd refuses a login if /etc/pam.d/ssh doesn't specify
"nullok" after
the pam_unix.so module -- is there any way to resolve this problem?  It seems
that OpenSSH should override PAM in this case, someone posted a patch on 6/19
that appears to address this problem,
(http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=99293778402235&w=2)
is there any chance this will be fixed in the next release?

Thanks,

--Adam
-- 
Adam McKenna <adam at flounder.net>   | GPG: 17A4 11F7 5E7E C2E7 08AA
http://flounder.net/publickey.html |      38B0 05D0 8BF7 2C6D 110A
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
Url :
http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20010906/4b94ecd7/attachment.bin

auth-pam.c  in auth_pam_password() already checks for this case in the
current CVS tree.  If it still occurs in the current tree than it should
be addressed within auth_pam_password().  Otherwise you need to check
and fix auth1.c and auth2.c.


- Ben

On Thu, 6 Sep 2001, Adam McKenna wrote:
> I noticed while investigating Debian Bug #93200
>
(http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=93200&repeatmerged=yes)
> that sshd refuses a login if /etc/pam.d/ssh doesn't specify
"nullok" after
> the pam_unix.so module -- is there any way to resolve this problem?  It
seems
> that OpenSSH should override PAM in this case, someone posted a patch on
6/19
> that appears to address this problem,
>
(http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=99293778402235&w=2)
> is there any chance this will be fixed in the next release?
>
> Thanks,
>
> --Adam
> --
> Adam McKenna <adam at flounder.net>   | GPG: 17A4 11F7 5E7E C2E7 08AA
> http://flounder.net/publickey.html |      38B0 05D0 8BF7 2C6D 110A
>