From 58fef5f8092b937caa2a11648f3937e17f718d81 Mon Sep 17 00:00:00 2001
From: Micah Anderson <micah@riseup.net>
Date: Fri, 26 Sep 2008 17:51:12 -0400
Subject: add variable sshd_permit_empty_passwords, with the default set to no

---
 templates/sshd_config/CentOS_normal.erb | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

(limited to 'templates/sshd_config/CentOS_normal.erb')

diff --git a/templates/sshd_config/CentOS_normal.erb b/templates/sshd_config/CentOS_normal.erb
index a784842..92ba92e 100644
--- a/templates/sshd_config/CentOS_normal.erb
+++ b/templates/sshd_config/CentOS_normal.erb
@@ -94,7 +94,13 @@ PasswordAuthentication yes
 <%- else %>
 PasswordAuthentication no
 <%- end %>
-#PermitEmptyPasswords no
+
+# To enable empty passwords, change to yes (NOT RECOMMENDED)
+<%- if real_sshd_empty_passwords.to_s == 'yes' then %>
+PermitEmptyPasswords yes
+<% else -%>
+PermitEmptyPasswords no
+<% end -%>
 
 # Change to no to disable s/key passwords
 <%- if real_sshd_challenge_response_authentication.to_s == 'yes' then %>
-- 
cgit v1.2.3