On Wed, 2004-11-24 at 23:03 +0100, Dario Lesca wrote:
On a standard installation of FC1 and FC2 (and FC3?) is permit to
login
with a user with a empty password ... is this correct?
This is fixed in FC3.
How to disable this "feature"?
Remove:
auth required pam_stack.so service=system-auth
from /etc/pam.d/sshd and replace it with auth lines
from /etc/pam.d/system-auth except with removing nullok option of
pam_unix.so
Or rebuild pam...src.rpm from FC3 on your FC2/1 and install it.
--
Tomas Mraz <tmraz(a)redhat.com>