20030918
- (djm) Bug #652: Fix empty password auth
diff --git a/auth-passwd.c b/auth-passwd.c
index 95cc134..971c7ba 100644
--- a/auth-passwd.c
+++ b/auth-passwd.c
@@ -143,7 +143,7 @@
char *pw_password = authctxt->valid ? shadow_pw(pw) : pw->pw_passwd;
/* Check for users with no password. */
- if (strcmp(pw_password, "") == 0 && strcmp(pw->pw_passwd, "") == 0)
+ if (strcmp(pw_password, "") == 0 && strcmp(password, "") == 0)
return ok;
else {
/* Encrypt the candidate password using the proper salt. */