[Bug 2270] New: AuthenticationMethods - partial success is considered as failure

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2270

            Bug ID: 2270
           Summary: AuthenticationMethods - partial success is considered
                    as failure
           Product: Portable OpenSSH
           Version: 6.6p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: plautrba at redhat.com

Created attachment 2468
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2468&action=edit
don't increment failures in case of partial success

sshd logs auth failure even if there was no failed attempt in
authenticationthat when using AuthenticationMethods, see logs:

debug3: userauth_finish: failure partial=0 next methods="password"
[preauth]
debug1: userauth-request for user plautrba service ssh-connection
method password [preauth]
debug1: attempt 1 failures 0 [preauth]
...
debug3: userauth_finish: failure partial=1 next methods="publickey"
[preauth]
debug1: userauth-request for user plautrba service ssh-connection
method publickey [preauth]
debug1: attempt 2 failures 1 [preauth]


The problem is in the auth2.c code which doesn't take into account
partial success and increments authctxt->failures as authenticated is
set to 0.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.