possible bug + patch : OpenSSH 3.6.1p2 +UnixWare 7.1.1 +SSH2 + P asswordAuthentication no + PermitEmptyPasswords yes

[Ben Lindstrom]

On Thu, 17 Jul 2003, Vikash Badal - PCS wrote:

[..]
> -       return PRIVSEP(auth_password(authctxt, "")) && authctxt->valid;
> +       return PRIVSEP(auth_password(authctxt, ""))
> +               && authctxt->valid
> +               && options.password_authentication;
>  }
>

If this fixes your problem then the bug is in auth_password() function
call.  This will never go into the tree because this is just a bandaid.

I could have already swore I pointed this out a few days ago.

- Ben