[Freeciv-Dev] Re: client/server authentication (PR#1767)

["ChrisK@xxxxxxxx" <ChrisK@xxxxxxxx>]

On Tue, Jun 03, 2003 at 12:19:31PM -0700, Raimar Falke wrote:
> On Tue, May 27, 2003 at 09:04:09PM -0700, Mike Kaufman wrote:
> > On Tue, May 27, 2003 at 01:36:56PM -0700, ChrisK@xxxxxxxx wrote:
> > 
> > heh, auth6q.diff at your service.
> > 
> > > After sending the password, there is a delay of 1-2 seconds before it get
> > > accepted (local). Is this necessary?
> > 
> > yes. unless we set a delay for the first request, password cracking is
> > fast. local users shouldn't worry about it since they won't be using auth.
> > (thx for testing anyway).
> 
> I didn't test the patch yet but this sounds wrong. There shouldn't be
> a timeout for a good password.

You mean a delay?

But that is what ssh does. Needs to be, over net, I think.

Christian

-- 
Christian Knoke     * * *      http://www.enter.de/~c.knoke/
* * * * * * * * *  Ceterum censeo Microsoft esse dividendum.