dropbear still requires password when password is blank

[Paul Smith]

On Thu, 2012-04-26 at 15:33 +0000, Grant Edwards wrote:
> I'm trying to switch from the openssh server to dropbear's server on
> an embedded system, and I've run into one snag.  I've enabled the
> "allow blank password" feature, but dropbear still prompts for a
> password on accounts that have blank passwords.  That's "wrong" -- or
> at least it's different than what openssh, telnetd, login do.

I've not been following dropbear development but a number of years ago,
dropbear didn't support no-password login (as root for sure).  I created
a patch and submitted it to the dropbear list.  Not sure if it (or
something like it) was integrated.

If it helps your investigation here's a link to the mailing list post
with my patch although this was 3 years ago so not sure if/how much the
code has changed:

http://permalink.gmane.org/gmane.network.ssh.dropbear/845