Looking at all the ssh-login attempts by script-kiddies I assume that there are messed up systems connected to the internet that have password-less accounts set up.
But how to check a Linux/Unix system for such accounts (perhaps created by a broken installer script, a confused admin or something like this)?
As first approximation I can think of something like:
$ grep '^[^:]\+::' /etc/passwd /etc/shadow
Prints all accounts with an empty password - but perhaps on the concrete system such accounts are not even a problem because no program accepts empty entries - c.f. password(5):
However, some applications which read the /etc/passwd file may decide not to permit any access at all if the password field is blank.
But what about hashed empty strings as passwords (e.g.
How to check for them?
And how to check accounts when more sophisticated account databases are in use (NIS, LDAP, ...)?