Is there a fix available for CAN-2003-0190

[Darren Tucker]

Senthil Kumar wrote:
> I tried the following  workaround in auth-krb5.c to overcome the 
> difference in appearance of delay in password prompts for valid and in 
> valid users in OpenSSH-3.9p1.
[...]
>>          if (!authctxt->valid)
>>            ;;
> 
> With this, there is no difference in time delay for appearance of 
> password prompts for both valid and in valid users with the following 
> options in sshd configuration.

Sorry, I don't use Kerberos and I don't know.  Perhaps someone who does 
could comment?

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.