Subject: Re: PAM vs empty password & rsh
To: Christos Zoulas <christos@tac.gw.com>
From: Chuck Silvers <chuq@chuq.com>
List: tech-userlevel
Date: 05/10/2005 09:05:13
On Tue, May 10, 2005 at 11:05:52AM -0400, Christos Zoulas wrote:
> In article <20050510135707.GA24027@spathi.chuq.com>,
> Chuck Silvers  <chuq@chuq.com> wrote:
> >in the pre-PAM world, if a user had no password then rshd would allow
> >any user from any host to execute commands as that user, but the PAMified
> >rshd doesn't allow this.  what's the best way to get the old behaviour back?
> 
> in /etc/pam.d/rsh change the pam_rhosts authentication from required to
> sufficient.

that allows anyone in, even if the account has a password.
I was thinking it would be something more along the lines of
the "nullok" option that pam_unix has.

-Chuck