Porting to platforms without true stat() support would be simpler if getpassf() (authentic.c) honored the strict modes option. The code would be similar to the existing code in get_secret().
The strict-modes setting is a daemon setting. The getpassf() function is a client function, so the two are not related. It might be nice to have a way to make the client strict -- perhaps a configure option.
Oops, I forgot to consider that this was a client side issue. A configure option would be handy. For now, we will just patch it out with an #ifdef. In case you would like to add the OS/2 port to your list of available binaries, it can be found at http://www.smedley.info/os2ports/index.php?page=rsync
This was reported to the rsync team as https://bugzilla.samba.org/show_bug.cgi?id=5401 As was pointed out by the maintainers, I goofed on my suggested fix. What's really needed is to #ifdef the code based on a configure variable. If might be sufficient to just use __OS2__.