Thank you!
For dropbear changes in the TODO there\'s a check in auth.c which needs to be changed, what is wanted? The check can be logged, but doesn\'t reports a failed login, or could be added a config option to permit or not empty passwords.
This check is hardcoded in an if:
if (ses.authstate.pw-]pw_passwd[0] == \'\0\') {
TRACE((\"leave checkusername: empty pword\"));
dropbear_log(LOG_WARNING, \"user \'%s\' has blank password, rejected\",
ses.authstate.printableuser);
send_msg_userauth_failure(0, 1);
return DROPBEAR_FAILURE;
}
As for a lightweight ssh client, isn\'t lsh a good option?