sshd accepts empty password?

Discussion in 'macOS' started by cheungpat, Aug 26, 2005.

  1. cheungpat macrumors newbie

    Aug 26, 2005

    I'm new to Mac OS X. I have a Mac Mini running Mac OS X 10.4.2.

    After getting my new Mac Mini I enabled Remote Login (SSH) and create a few new accounts. My account is password protected but my father's account isn't. I tried logging in with my father's account and the sshd accepted the empty password. Weird. I read from somewhere that empty passwords are banned from sshd. I edited /etc/sshd_config and set "PermitEmptyPassword no".

    Could anyone point me to the relevant config file/utility? I have set the default shell of that account to /sbin/nologin to protect the computer at the moment.


  2. kalisphoenix macrumors 65816


    Jul 26, 2005
    If you want my advice, just read about setting up the crypto signature stuff. It's much better than passwords. The only reason I don't use it is because I reformat **** too often....
  3. iMeowbot macrumors G3


    Aug 30, 2003
    UsePAM can override PermitEmptyPasswords. The default is supposed to be no, but it seems that you need to explicitly set it that way.

Share This Page