Password-Less User Account

devUnix · 10-22-2012, 09:23 AM

Hi Guys,

How do we create a user account (unprivileged) without needing a password to log-in?

I need to do this on Solaris 10 and CentOS. I am not meaning SSH here which can be configured to achieve this purpose.

Thanks in advance!

acid_kewpie · 10-22-2012, 09:28 AM

you can formally delete a password as root "passwd -d username" but it's such a bad idea in general...

Reuti · 10-23-2012, 05:54 AM

Quote:

Originally Posted by acid_kewpie

you can formally delete a password as root "passwd -d username" but it's such a bad idea in general...

...and therefore some PAM modules will need nullok as option too to allow it.

devUnix · 10-23-2012, 10:24 AM

Quote:

Originally Posted by acid_kewpie

you can formally delete a password as root "passwd -d username" but it's such a bad idea in general...

I did that and when I logged in using the log-in id (demo, for example), I was prompted for the password and not allowed to log-in without entering one.

Reuti · 10-23-2012, 10:29 AM

Depending on the PAM modules you use, you can try to add in the necessary /etc/pam.d files for the password check:

Code:

password        requisite       pam_pwcheck.so  nullok cracklib remember= no_obscure_checks 
password        required        pam_unix2.so    use_authtok nullok

devUnix · 10-23-2012, 10:44 AM

Quote:

Originally Posted by Reuti

Depending on the PAM modules you use, you can try to add in the necessary /etc/pam.d files for the password check:

Code:

password        requisite       pam_pwcheck.so  nullok cracklib remember= no_obscure_checks 
password        required        pam_unix2.so    use_authtok nullok

How do I check what PAM Module is in place on my system? I am using, for example, CentOS 6.3 Linux.

Reuti · 10-23-2012, 10:46 AM

Check the path I posted, and then the file with the access method like SSH you use.

sundialsvcs · 10-23-2012, 10:50 AM

In addition, I wouldn't do this at all unless you know that the user will be running a restricted shell, e.g. for a kiosk of some kind. Don't give them a command-prompt . . .