Subject: Re: pam and nullok
To: Christos Zoulas <christos@astron.com>
From: Rui Paulo <rpaulo@NetBSD.org>
List: current-users
Date: 09/17/2005 15:46:56
--WChQLJJJfbwij+9x
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2005.09.17 13:03:23 +0000, Christos Zoulas wrote:
| In article <20050917103553.GA366@proton.internal.fnop.net>,
| Rui Paulo  <rpaulo@NetBSD.org> wrote:
| >-=3D-=3D-=3D-=3D-=3D-
| >
| >On 2005.08.26 09:51:50 +0100, David Brownlee wrote:
| >| 	Trying to upgrade a system to NetBSD-3_BETA and hitting a pam
| >| 	problem. It has one account to which access should be permitted
| >| 	without a password. I've tried adding nullok to pam.d/system
| >| 	but it still seems to reject login via both telnet and ssh.
| >|=20
| >| 	Anyone have any idea what I'm missing?
| >
| >Hmm, no. But it is impossible to login without setting a root
| >password, i.e., using the passwd and master.passwd files from the
| >sets. I think PAM shouldn't be so restrict.
|=20
| Please file a PR so we don't forget.

security/31334

		-- Rui Paulo

--WChQLJJJfbwij+9x
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (NetBSD)

iD8DBQFDLCxfZPqyxs9FH4QRApksAJ0UttNmsxZLYFFnslrl0DnCBFV0CgCeK0sR
p2hxFpWViW171X2RxFd8jtg=
=2pUb
-----END PGP SIGNATURE-----

--WChQLJJJfbwij+9x--