[Bug 983] Required authentication

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Apr 17 22:23:57 EST 2006


http://bugzilla.mindrot.org/show_bug.cgi?id=983





------- Comment #9 from dtucker at zip.com.au  2006-04-17 22:23 -------
(In reply to comment #8)
> auth_remove_from_list() returns NULL when the list is empty, so the normal
> authentication path will continue.

No, auth_remove_from_list() sets options.required_auth1 to NULL, but by that
time you're already inside the "if" block and authenticated is zeroed
unconditionally.

I have updated the patch to -current and this part doesn't seem to work,
although auth1.c has changed a lot and it's quite possible I missed something
merging the patch.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list