tech-net: Re: NetBSD-3.1 was attacked: Bug of SSHD or cyrus-sasl?

Subject: Re: NetBSD-3.1 was attacked: Bug of SSHD or cyrus-sasl?
To: None <tech-net@NetBSD.org, tech-pkg@NetBSD.org, netbsd-users@NetBSD.org>
From: Pavel Cahyna <pavel@NetBSD.org>
List: tech-net
Date: 01/12/2007 13:18:58

On Fri, Jan 12, 2007 at 05:17:13PM +0800, Water NB wrote:
> Question 5) empty password means needn't password?
> Or means any passwords are invalid?

needn't password. see the passwd(5) manual page.

btw on my system, when I've installed cyrus-sasl, the cyrus user has the
password disabled (it is all asterisks).

But for some reason it has /bin/sh as shell, not /sbin/nologin.

Pavel