David Esposito

Comment: PAM authentication fails if 'root' has no passw

Actually, this is also a problem in validate_unix_user() If a user doesn't have a password, the pam_authenticate() returns PAM_SUCCESS() ... which means that the user can log in using any password they wish.

2009-11-05 14:01:36 UTC in Webmin