[Bug 702] dont call userauth_finish after auth2_challenge_stop

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Sep 23 20:07:32 EST 2003


http://bugzilla.mindrot.org/show_bug.cgi?id=702





------- Additional Comments From markus at openbsd.org  2003-09-23 20:07 -------
yes, my last patch was broken.

when authentication fails and postpone is not
set, then we need to call challenge_start _before_
userauth_finish because _start will set postpone
if it sends a packet to the client. if this is the
case then userauth_finish will behave different
and send _no_ failure packet. so the patch 448
or 447 are better.

however, the comments in the code need to explain
the mess better.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list