comparison svr-auth.c @ 628:d40f3cc47aed

- Add ALLOW_BLANK_PASSWORD option - Don't reject blank-password logins via public key
author Matt Johnston <matt@ucc.asn.au>
date Wed, 26 Oct 2011 15:49:47 +0000
parents a98a2138364a
children 0edf08895a33
comparison
equal deleted inserted replaced
627:7cc34a52feb8 628:d40f3cc47aed
247 dropbear_log(LOG_WARNING, "root login rejected"); 247 dropbear_log(LOG_WARNING, "root login rejected");
248 send_msg_userauth_failure(0, 1); 248 send_msg_userauth_failure(0, 1);
249 return DROPBEAR_FAILURE; 249 return DROPBEAR_FAILURE;
250 } 250 }
251 251
252 /* check for an empty password */
253 if (ses.authstate.pw_passwd[0] == '\0') {
254 TRACE(("leave checkusername: empty pword"))
255 dropbear_log(LOG_WARNING, "User '%s' has blank password, rejected",
256 ses.authstate.pw_name);
257 send_msg_userauth_failure(0, 1);
258 return DROPBEAR_FAILURE;
259 }
260
261 TRACE(("shell is %s", ses.authstate.pw_shell)) 252 TRACE(("shell is %s", ses.authstate.pw_shell))
262 253
263 /* check that the shell is set */ 254 /* check that the shell is set */
264 usershell = ses.authstate.pw_shell; 255 usershell = ses.authstate.pw_shell;
265 if (usershell[0] == '\0') { 256 if (usershell[0] == '\0') {