Thanks for all your replies, it helped a lot.

I've performed some more testing, and it showed up that the best explanation
(because th shortest) is Scott's "It does not mean the password IS empty, but
that it CAN be empty".

Some interesting (at least for me) details found as I've played with accounts:
-- non-privileged user is always bound by (global) minimal required password
length, so even the user with UF_PASSWD_NOTREQD flag set cannot change its
password to empty one if min_pwd_len > 0
-- admin can change user's password to empty iff either min_pwd_len = 0 or
user has UF_PASSWD_NOTREQD set
-- and finally, even admin cannot set non-empty password shorter than
min_pwd_len regardless of UF_PASSWD_NOTREQD flag

Petr

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]