3.6.1p2, Spurious PAM failure messages WITH "PermitEmptyPasswords no", and a (micro) fix

Frank Cusack fcusack at fcusack.com
Wed May 7 16:23:29 EST 2003


On Tue, May 06, 2003 at 08:46:51PM -0700, Lars wrote:
> Hi,
> 
> after installing 3.6.1p2 I noticed spurious PAM login failures
> even with PermitEmptyPasswords set to "no":
...
> That should really be
> +       return ok && auth_pam_password(authctxt, password);
> 
> (Note that ok is checked first, as I said in the subject its a trivial
> micro fix)

No, that part of the code is correct as it stands.  Take a look at the
list archives, this was discussed just a few days back.

/fc




More information about the openssh-unix-dev mailing list