On Fri, 2004-11-26 at 12:54 +0100, Dario Lesca wrote: > Il gio, 2004-11-25 alle 09:01, Tomas Mraz ha scritto: > > On Wed, 2004-11-24 at 23:03 +0100, Dario Lesca wrote: > > > On a standard installation of FC1 and FC2 (and FC3?) is permit to login > > > with a user with a empty password ... is this correct? > > This is fixed in FC3. > > so this is a bug. (bad bug!), if I say "PermitEmptyPasswords no" SSHD > must NON permit logon to user whitout a password. > > is a bug of openssh or fc-openssh? Bug in PAM. -- Tomas Mraz <tmraz@xxxxxxxxxx>
