Is there a fix available for CAN-2003-0190

Darren Tucker dtucker at
Wed Dec 22 21:34:57 EST 2004

Senthil Kumar wrote:
> I tried the following  workaround in auth-krb5.c to overcome the 
> difference in appearance of delay in password prompts for valid and in 
> valid users in OpenSSH-3.9p1.
>>          if (!authctxt->valid)
>>            ;;
> With this, there is no difference in time delay for appearance of 
> password prompts for both valid and in valid users with the following 
> options in sshd configuration.

Sorry, I don't use Kerberos and I don't know.  Perhaps someone who does 
could comment?

Darren Tucker (dtucker at
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

More information about the openssh-unix-dev mailing list