[Bug 559] PAM fixes

Damien Miller djm at mindrot.org
Tue May 13 10:50:55 EST 2003

Darren J Moffat wrote:
> On Mon, 12 May 2003, Damien Miller wrote:
>> The PAM stuff is IMO separate - one may disable empty passwords by
>> omitting the "nullok" flag to pam_unix.so in the PAM control file.
> That is an argument specific to one vendors implementation of a specific module.
> There is (and probably should not be) any standardization of the arguments
> modules take.  Some vendors my choose to standardize options across modules
> they implement but it is certainly not required.

Ok, but the point was that control over the behaviour of PAM modules and
what they accept should be done in the PAM control file and not in


More information about the openssh-unix-dev mailing list