sshd accepts empty password?

[cheungpat]

Hi,

I'm new to Mac OS X. I have a Mac Mini running Mac OS X 10.4.2.

After getting my new Mac Mini I enabled Remote Login (SSH) and create a few new accounts. My account is password protected but my father's account isn't. I tried logging in with my father's account and the sshd accepted the empty password. Weird. I read from somewhere that empty passwords are banned from sshd. I edited /etc/sshd_config and set "PermitEmptyPassword no".

Could anyone point me to the relevant config file/utility? I have set the default shell of that account to /sbin/nologin to protect the computer at the moment.

Thanks.

Patrick

 

[kalisphoenix]

If you want my advice, just read about setting up the crypto signature stuff. It's much better than passwords. The only reason I don't use it is because I reformat **** too often....

 

[iMeowbot]

UsePAM can override PermitEmptyPasswords. The default is supposed to be no, but it seems that you need to explicitly set it that way.