PAM overrides PermitEmptyPasswords

Adam McKenna adam-dated-1000248167.fb554c at flounder.net
Fri Sep 7 08:42:46 EST 2001


I noticed while investigating Debian Bug #93200
(http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=93200&repeatmerged=yes)
that sshd refuses a login if /etc/pam.d/ssh doesn't specify "nullok" after
the pam_unix.so module -- is there any way to resolve this problem?  It seems
that OpenSSH should override PAM in this case, someone posted a patch on 6/19
that appears to address this problem,
(http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=99293778402235&w=2)
is there any chance this will be fixed in the next release?

Thanks,

--Adam
-- 
Adam McKenna <adam at flounder.net>   | GPG: 17A4 11F7 5E7E C2E7 08AA
http://flounder.net/publickey.html |      38B0 05D0 8BF7 2C6D 110A
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20010906/4b94ecd7/attachment.bin 


More information about the openssh-unix-dev mailing list