空密码帐户检测不出来》？？？？急

xiaowei022341

请问各位大虾，我在系统设置空密码用户root为空\r\n\r\n我用logins -p 就应该可以检测出来root是空密码的用户，为什么检测不出来了他是空密码的用户呢？\r\n\r\n急！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！

风之幻想

你把其他的一个用户也设置为空.再看看.

xiaowei022341

好不行啊，我建立了一个普通用户，再设置空密码还是检测不出来系统里面有空密码用户

风之幻想

原帖由 xiaowei022341 于 2007-3-9 17:30 发表\r\n好不行啊，我建立了一个普通用户，再设置空密码还是检测不出来系统里面有空密码用户

\r\n在等待高手...................

xiaowei022341

大家帮帮忙，要是这样网络中很多的主机存在空密码用户那不是很危险！！！！！！！！！

wangyl1977

你就是最高的了!  \r\n\r\n

原帖由 风之幻想 于 2007-3-9 17:32 发表\r\n\r\n在等待高手...................

xiaowei022341

help ???????????????????????????

xiaowei022341

大家，可以在自己的系统建立试试，看能不能检测出来空密码的帐户

zza

没登陆的用户就不显示了呗

briangao

Are these new accounts (meaning the user never logged in before)? If not, then it is not too bad. As long as you have PASSREQ=YES in /etc/default/login file, user with empty password will not be allowed to login. For ssh , as long as you have PermitEmptyPasswords no in sshd_config file, the user with empty password is also disabled.\r\n\r\nNow the questions is why your logins -p doesn\'t work? I tried on Solaris 10 and 8, both works perfect. Double check your /etc/nsswitch.conf file and make sure passwd is using files. \r\n\r\nChecking empty password is a simple task. Worst comes worst, write your own script to awk out the second file of /etc/shadow file entires. If it is empty, print out the user name.\r\n\r\nHope this helps.