空密码帐户检测不出来》？？？？急

briangao

Are these new accounts (meaning the user never logged in before)? If not, then it is not too bad. As long as you have PASSREQ=YES in /etc/default/login file, user with empty password will not be allowed to login. For ssh , as long as you have PermitEmptyPasswords no in sshd_config file, the user with empty password is also disabled.

Now the questions is why your logins -p doesn't work? I tried on Solaris 10 and 8, both works perfect. Double check your /etc/nsswitch.conf file and make sure passwd is using files.

Checking empty password is a simple task. Worst comes worst, write your own script to awk out the second file of /etc/shadow file entires. If it is empty, print out the user name.

Hope this helps.