- djm@cvs.openbsd.org 2011/03/10 11:34:25

[auth.h]
     allow GSSAPI authentication to detect when a server-side failure causes
     authentication failure and don't count such failures against MaxAuthTries;
     bz#1244 from simon AT sxw.org.uk; ok markus@ before lock
This commit is contained in:
Damien Miller 2011-05-05 14:04:50 +10:00
parent 3fcdfd55a3
commit b2da7d185e
2 changed files with 3 additions and 2 deletions

View File

@ -10,7 +10,7 @@
Thanks to tim@ for testing on affected platforms. Thanks to tim@ for testing on affected platforms.
- OpenBSD CVS Sync - OpenBSD CVS Sync
- djm@cvs.openbsd.org 2011/03/10 02:52:57 - djm@cvs.openbsd.org 2011/03/10 02:52:57
[auth2-gss.c auth2.c] [auth2-gss.c auth2.c auth.h]
allow GSSAPI authentication to detect when a server-side failure causes allow GSSAPI authentication to detect when a server-side failure causes
authentication failure and don't count such failures against MaxAuthTries; authentication failure and don't count such failures against MaxAuthTries;
bz#1244 from simon AT sxw.org.uk; ok markus@ before lock bz#1244 from simon AT sxw.org.uk; ok markus@ before lock

3
auth.h
View File

@ -1,4 +1,4 @@
/* $OpenBSD: auth.h,v 1.66 2010/05/07 11:30:29 djm Exp $ */ /* $OpenBSD: auth.h,v 1.67 2011/03/10 11:34:25 djm Exp $ */
/* /*
* Copyright (c) 2000 Markus Friedl. All rights reserved. * Copyright (c) 2000 Markus Friedl. All rights reserved.
@ -53,6 +53,7 @@ struct Authctxt {
int valid; /* user exists and is allowed to login */ int valid; /* user exists and is allowed to login */
int attempt; int attempt;
int failures; int failures;
int server_caused_failure;
int force_pwchange; int force_pwchange;
char *user; /* username sent by the client */ char *user; /* username sent by the client */
char *service; char *service;