sshd accepts empty password?

Discussion in 'macOS' started by cheungpat, Aug 26, 2005.

  1. cheungpat macrumors newbie

    Joined:
    Aug 26, 2005
    #1
    Hi,

    I'm new to Mac OS X. I have a Mac Mini running Mac OS X 10.4.2.

    After getting my new Mac Mini I enabled Remote Login (SSH) and create a few new accounts. My account is password protected but my father's account isn't. I tried logging in with my father's account and the sshd accepted the empty password. Weird. I read from somewhere that empty passwords are banned from sshd. I edited /etc/sshd_config and set "PermitEmptyPassword no".

    Could anyone point me to the relevant config file/utility? I have set the default shell of that account to /sbin/nologin to protect the computer at the moment.

    Thanks.

    Patrick
     
  2. kalisphoenix macrumors 65816

    kalisphoenix

    Joined:
    Jul 26, 2005
    #2
    If you want my advice, just read about setting up the crypto signature stuff. It's much better than passwords. The only reason I don't use it is because I reformat **** too often....
     
  3. iMeowbot macrumors G3

    iMeowbot

    Joined:
    Aug 30, 2003
    #3
    UsePAM can override PermitEmptyPasswords. The default is supposed to be no, but it seems that you need to explicitly set it that way.
     

Share This Page