Fix login delay, spurious auth.log entry, and PermitRootLogin information

leakage due to PAM issues with upstream's recent security update (thanks,
Darren Tucker; closes: #99168, #192207, #193546).

1 files changed, 2 insertions, 0 deletions

diff --git a/auth2-none.c b/auth2-none.c
index 692a2961f..46a4c617e 100644
--- a/auth2-none.c
+++ b/auth2-none.c
@@ -100,6 +100,8 @@ userauth_none(Authctxt *authctxt)
         if (check_nt_auth(1, authctxt->pw) == 0)
                 return(0);
 #endif
+        if (options.permit_empty_passwd == 0)
+                return 0;
         return PRIVSEP(auth_password(authctxt, "")) && authctxt->valid;
 }