solaris 系统空密码用户检测不出来？怪事，我就不信没有搞定

xiaowei022341

我在系统里面root 和普通用户test 密码设置为空\r\n\r\n#logins -p 没有能查出空密码的用户？\r\n\r\nhelp

briangao

Are these new accounts (meaning the user never logged in before)? If not, then it is not too bad. As long as you have PASSREQ=YES in /etc/default/login file, user with empty password will not be allowed to login. For ssh , as long as you have PermitEmptyPasswords no in sshd_config file, the user with empty password is also disabled.\r\n\r\nNow the questions is why your logins -p doesn\'t work? I tried on Solaris 10 and 8, both works perfect. Double check your /etc/nsswitch.conf file and make sure passwd is using files. \r\n\r\nChecking empty password is a simple task. Worst comes worst, write your own script to awk out the second file of /etc/shadow file entires. If it is empty, print out the user name.\r\n\r\nHope this helps.

死了都要爱

又新注了个号，路过，英文真的重要啊，这我早就知道，就是学不好啊！！！

huanglao2002

佩服briangao\r\n\r\n分析的很全面\r\n\r\n我想平时解决问题就缺少这样缜密的思维。\r\n\r\n这两步我可能会想到\r\n/etc/default/login\r\nsshd_config\r\n\r\n /etc/nsswitch.conf  说实在的，可能不会考虑到。