On Wed, 2004-11-24 at 23:03 +0100, Dario Lesca wrote: > On a standard installation of FC1 and FC2 (and FC3?) is permit to login > with a user with a empty password ... is this correct? This is fixed in FC3. > How to disable this "feature"? Remove: auth required pam_stack.so service=system-auth from /etc/pam.d/sshd and replace it with auth lines from /etc/pam.d/system-auth except with removing nullok option of pam_unix.so Or rebuild pam...src.rpm from FC3 on your FC2/1 and install it. -- Tomas Mraz <tmraz@xxxxxxxxxx>
