nhyatt/putty-source
1
0
Fork 0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-06-30 19:12:48 -05:00
Code Issues Projects Releases Wiki Activity

Uppity: support SSH-2 password change request.

Browse Source 
This is the first time I've _ever_ been able to test that feature of
the client userauth code personally, and pleasingly, it seems to work
fine.
This commit is contained in:
Simon Tatham
2018-10-29 07:23:32 +00:00
parent 730af28b99
commit 23e98b0afb
4 changed files with 55 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
unix/uxserver.c
View File

@ -175,9 +175,36 @@ int auth_none(AuthPolicy *ap, ptrlen username)
{
return FALSE;
}
int auth_password(AuthPolicy *ap, ptrlen username, ptrlen password)
int auth_password(AuthPolicy *ap, ptrlen username, ptrlen password,
ptrlen *new_password_opt)
{
return ptrlen_eq_string(password, "weasel");
const char *PHONY_GOOD_PASSWORD = "weasel";
const char *PHONY_BAD_PASSWORD = "ferret";
if (!new_password_opt) {
/* Accept login with our preconfigured good password */
if (ptrlen_eq_string(password, PHONY_GOOD_PASSWORD))
return 1;
/* Don't outright reject the bad password, but insist on a change */
if (ptrlen_eq_string(password, PHONY_BAD_PASSWORD))
return 2;
/* Reject anything else */
return 0;
} else {
/* In a password-change request, expect the bad password as input */
if (!ptrlen_eq_string(password, PHONY_BAD_PASSWORD))
return 0;
/* Accept a request to change it to the good password */
if (ptrlen_eq_string(*new_password_opt, PHONY_GOOD_PASSWORD))
return 1;
/* Outright reject a request to change it to the same password
* as it already 'was' */
if (ptrlen_eq_string(*new_password_opt, PHONY_BAD_PASSWORD))
return 0;
/* Anything else, pretend the new pw wasn't good enough, and
* re-request a change */
return 2;
}
}
int auth_publickey(AuthPolicy *ap, ptrlen username, ptrlen public_blob)
{