If you want passwordless logins to work with pam enabled, then you can't
have "nullok_secure" enabled on pam_unix entries. Add some
postprocessing to change these to "nullok" when debug-tweaks is in
IMAGE_FEATURES, in order to make passwordless logins with PAM work
again.

Fixes [YOCTO #5973].

Signed-off-by: Paul Eggleton <[email protected]>
---
 meta/classes/image.bbclass | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/meta/classes/image.bbclass b/meta/classes/image.bbclass
index 9a04288..3436624 100644
--- a/meta/classes/image.bbclass
+++ b/meta/classes/image.bbclass
@@ -298,6 +298,10 @@ ssh_allow_empty_password () {
                        printf '\nDROPBEAR_EXTRA_ARGS="-B"\n' >> 
${IMAGE_ROOTFS}${sysconfdir}/default/dropbear
                fi
        fi
+
+       if [ -d ${IMAGE_ROOTFS}${sysconfdir}/pam.d ] ; then
+               sed -i 's/nullok_secure/nullok/' 
${IMAGE_ROOTFS}${sysconfdir}/pam.d/*
+       fi
 }
 
 # Enable postinst logging if debug-tweaks is enabled
-- 
1.8.5.3

-- 
_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Reply via email to