[Bug 559] PAM fixes

[Damien Miller]

Darren J Moffat wrote:
> On Mon, 12 May 2003, Damien Miller wrote:
> 
>> The PAM stuff is IMO separate - one may disable empty passwords by
>> omitting the "nullok" flag to pam_unix.so in the PAM control file.
> 
> That is an argument specific to one vendors implementation of a specific module.
> There is (and probably should not be) any standardization of the arguments
> modules take.  Some vendors my choose to standardize options across modules
> they implement but it is certainly not required.

Ok, but the point was that control over the behaviour of PAM modules and
what they accept should be done in the PAM control file and not in
sshd_config.

-d