sshd: it is permit to login with a Empty Password

[Iago Rubio]

On Wed, 2004-11-24 at 23:03, Dario Lesca wrote:
> On a standard installation of FC1 and FC2 (and FC3?) is permit to login
> with a user with a empty password ... is this correct?
> 
[snip]
> 
> How to disable this "feature"?

Put a non working shell as default for this user.

[root at igloo root]# useradd -s /sbin/nologin nopasswd

If you've got it already created use,

[root at igloo root]# usermod -s /sbin/nologin nopasswd
-- 
Iago Rubio