solaris 系统空密码用户检测不出来？怪事，我就不信没有搞定

xiaowei022341

我在系统里面root 和普通用户test 密码设置为空

#logins -p 没有能查出空密码的用户？

help

briangao

Are these new accounts (meaning the user never logged in before)? If not, then it is not too bad. As long as you have PASSREQ=YES in /etc/default/login file, user with empty password will not be allowed to login. For ssh , as long as you have PermitEmptyPasswords no in sshd_config file, the user with empty password is also disabled.

Now the questions is why your logins -p doesn't work? I tried on Solaris 10 and 8, both works perfect. Double check your /etc/nsswitch.conf file and make sure passwd is using files.

Checking empty password is a simple task. Worst comes worst, write your own script to awk out the second file of /etc/shadow file entires. If it is empty, print out the user name.

Hope this helps.

xiaowei022341

能不能说中文啊

briangao

能不能说中文啊

Very difficult for me to write in Chinese. Sorry

死了都要爱

又新注了个号，路过，英文真的重要啊，这我早就知道，就是学不好啊！！！

huanglao2002

佩服briangao

分析的很全面

我想平时解决问题就缺少这样缜密的思维。

这两步我可能会想到
/etc/default/login
sshd_config

/etc/nsswitch.conf  说实在的，可能不会考虑到。