[Bug 983] Required authentication

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Apr 17 23:22:38 EST 2006


http://bugzilla.mindrot.org/show_bug.cgi?id=983





------- Comment #13 from djm at mindrot.org  2006-04-17 23:21 -------
I don't follow: you only enter that block if authenticated is set and the list
still has one or more entries. 

Once you are in the block, it is because you have hit a required method. When
you exit the block, if you have completed all the required methods then the
list is set to NULL and any subsequent authentication against an enabled method
will succeed.

Returning without clearing "authenticated" means that the last method in the
list will succeed authentication, which is incorrect: these options are
"required, but not sufficient" authentications to be completed first.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list