dropbear still requires password when password is blank

Matt Johnston matt at ucc.asn.au
Wed May 9 22:55:13 WST 2012


Hi,

Somehow I missed this patch and also a similar one from
Chris Metcalf in 2010 :( Sorry about that.

Anyway, I've now committed the same functionality for the
next release (in Mercurial now).

Cheers,
Matt

On Thu, Apr 26, 2012 at 11:54:28AM -0400, Paul Smith wrote:
> On Thu, 2012-04-26 at 15:33 +0000, Grant Edwards wrote:
> > I'm trying to switch from the openssh server to dropbear's server on
> > an embedded system, and I've run into one snag.  I've enabled the
> > "allow blank password" feature, but dropbear still prompts for a
> > password on accounts that have blank passwords.  That's "wrong" -- or
> > at least it's different than what openssh, telnetd, login do.
> 
> I've not been following dropbear development but a number of years ago,
> dropbear didn't support no-password login (as root for sure).  I created
> a patch and submitted it to the dropbear list.  Not sure if it (or
> something like it) was integrated.
> 
> If it helps your investigation here's a link to the mailing list post
> with my patch although this was 3 years ago so not sure if/how much the
> code has changed:
> 
> http://permalink.gmane.org/gmane.network.ssh.dropbear/845
> 
> 


More information about the Dropbear mailing list