From owner-freebsd-questions@FreeBSD.ORG  Tue May  6 18:26:44 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id E1F3A1065689
	for <freebsd-questions@freebsd.org>;
	Tue,  6 May 2008 18:26:44 +0000 (UTC)
	(envelope-from freebsd-questions@lists.goldenpath.org)
Received: from randymail-a1.g.dreamhost.com (sd-green-bigip-66.dreamhost.com
	[208.97.132.66])
	by mx1.freebsd.org (Postfix) with ESMTP id CB4938FC19
	for <freebsd-questions@freebsd.org>;
	Tue,  6 May 2008 18:26:44 +0000 (UTC)
	(envelope-from freebsd-questions@lists.goldenpath.org)
Received: from [127.0.0.1] (shekel.dreamhost.com [208.113.247.228])
	by randymail-a1.g.dreamhost.com (Postfix) with ESMTP id 2D93318DB3B
	for <freebsd-questions@freebsd.org>;
	Tue,  6 May 2008 11:26:44 -0700 (PDT)
Message-ID: <4820A2E3.9030500@lists.goldenpath.org>
Date: Tue, 06 May 2008 14:26:43 -0400
From: "T." <freebsd-questions@lists.goldenpath.org>
User-Agent: Thunderbird 2.0.0.12 (Windows/20080213)
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: sshd on FreeBSD default allows blank passwords?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 06 May 2008 18:26:45 -0000

I didn't realize this before, but it came to my attention when debugging 
PAM problems.
Actually, sshd default does not allow it, but another default is in 
enabling PAM.
It's passing power over to PAM which is allowing it.

I didn't see another way immediately available to fix it, so I disabled 
PAM in sshd. Works as expected now.

Is there a PAM solution for this?

Is this intended to be the default behavior?