[Bug 1638] New: Skip the initial empty-password check

[bugzilla-daemon at bugzilla.mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=1638

           Summary: Skip the initial empty-password check
           Product: Portable OpenSSH
           Version: 5.2p1
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: jchadima at redhat.com


--- Comment #0 from jchadima at redhat.com 2009-08-31 18:04:42 EST ---
Skip the initial empty-password check if permit_empty_passwd is
disabled. This doesn't change the timing profiles of the host because
the additional condition check which can short-circuit the call to
pam_authenticate() has no dependency on the identity of the user who is
being authenticated.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.