Without this patch, authentication will accept any password! --- a/auth-pwd.c +++ b/auth-pwd.c @@ -251,12 +251,9 @@ int checkpasswd(char *user, char *pass) memset(spwd->sp_pwdp, 0, strlen(spwd->sp_pwdp)); #endif -#if defined(FREEBSD) || defined(SOLARIS) if (matched) { return(0); } else { return(-1); } -#endif - return(0); }