[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: System password authentication

From: Tom Copeland
Subject: Re: System password authentication
Date: Fri, 11 Apr 2003 18:09:19 -0400


Hear hear!  Setting up an anonymous CVS account with a blank password can be
kind of tricky sometimes... I've had to hunt down the /etc/shadow encryption
for a blank password before.  Just accepting a blank password for an account
with no password would clear that up.




----- Original Message -----
From: "Larry Jones" <address@hidden>
To: "Brian Murphy" <address@hidden>
Cc: <address@hidden>
Sent: Friday, April 11, 2003 5:47 PM
Subject: Re: System password authentication

> Brian Murphy writes:
> >
> > But this code rejects a blank password "" given by the user, should that
> > be accepted according to your explanation.
> Mea culpa -- I was looking at the wrong code.  You were right, that code
> *is* checking the system password, not the repository password.  And
> you're also correct that it accepts a non-blank entered password as
> matching a blank system password but rejects a blank entered password.
> I have no idea why -- the code seems to have been that way forever.  The
> fascist side of my personality wants to reject any attempt to use a
> system account with no password, the more liberal side says that if
> someone is stupid enough to have an account with no password then they
> deserve whatever happens (one can argue whether than means accepting any
> password at all or just a blank one).  Opinions from the peanut gallery?
> > Is there any chance of accepting a patch supporting PAM authentication?
> > For example mine... :-)
> I'd say there's a good chance of some PAM patch being accepted on the
> experimental branch.  Your patch still needs some work, the "#if
> SOLARIS2 == 260"'s in particular are almost certainly incorrect since
> other systems will most likely need the same code.  You need to test for
> whatever characteristic is important, not for a particular system.
> Please read the HACKING file if you haven't already for more advice.
> I'd also like to see some reports about how the code works on other
> systems.
> -Larry Jones
> Moms and reason are like oil and water. -- Calvin
> _______________________________________________
> Info-cvs mailing list
> address@hidden

reply via email to

[Prev in Thread] Current Thread [Next in Thread]