[openssh-commits] CVS: shitei.mindrot.org: openssh

Darren Tucker dtucker at mindrot.org
Thu Jan 20 11:05:35 EST 2005


CVSROOT:	/var/cvs
Module name:	openssh
Changes by:	dtucker at shitei.mindrot.org	2005/01/20 11:05:35

Modified files:
	.              : ChangeLog auth-bsdauth.c auth2-chall.c 

Log message:
- dtucker at cvs.openbsd.org 2005/01/19 13:11:47
[auth-bsdauth.c auth2-chall.c]
Have keyboard-interactive code call the drivers even for responses for
invalid logins.  This allows the drivers themselves to decide how to
handle them and prevent leaking information where possible.  Existing
behaviour for bsdauth is maintained by checking authctxt->valid in the
bsdauth driver.  Note that any third-party kbdint drivers will now need
to be able to handle responses for invalid logins.  ok markus@

cvs -n rdiff -u -r1.3615 -r1.3616 openssh/ChangeLog
cvs -n rdiff -u -r1.5 -r1.6 openssh/auth-bsdauth.c
cvs -n rdiff -u -r1.23 -r1.24 openssh/auth2-chall.c




More information about the openssh-commits mailing list