openssh unix dev - May 2002 - [Bug 235] While PermitEmptyPasswords no, user can connect, entering ANY other password

http://bugzilla.mindrot.org/show_bug.cgi?id=235





------- Additional Comments From mouring at eviladmin.org  2002-05-06 06:09
-------
Created an attachment (id=92)
Try the following patch to auth-passwd.c




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=235





------- Additional Comments From djm at mindrot.org  2002-05-06 09:28 -------
Are you using PAM? Your problem isn't related to
http://www.openssh.com/faq.html#3.2, is it?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=235





------- Additional Comments From mouring at eviladmin.org  2002-05-06 10:56
-------
DJM, as stated in the private list I can reproduce this with OpenBSD's
release
so it is not PAM related.  Just bad code that we picked up from back in the
old SSH Corp releases.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.