mod_auth_internal_hashed: Don't assume user doesn't exist if no recognizable authentication data is found.

Tue, 15 Jun 2010 09:11:10 +0500

author
Waqas Hussain <waqas20@gmail.com>
date
Tue, 15 Jun 2010 09:11:10 +0500
changeset 3268
c1b687a5818d
parent 3267
8f5d76cc4162
child 3269
342fd8f8ccd9

mod_auth_internal_hashed: Don't assume user doesn't exist if no recognizable authentication data is found.

plugins/mod_auth_internal_hashed.lua file | annotate | diff | comparison | revisions
--- a/plugins/mod_auth_internal_hashed.lua	Tue Jun 15 09:08:02 2010 +0500
+++ b/plugins/mod_auth_internal_hashed.lua	Tue Jun 15 09:11:10 2010 +0500
@@ -100,10 +100,10 @@
 			log("debug", "account not found for username '%s' at host '%s'", username, module.host);
 			return nil, "Auth failed. Invalid username";
 		end
-		if (account.hashpass == nil or string.len(account.hashpass) == 0) and (account.password == nil or string.len(account.password) == 0) then
+		--[[if (account.hashpass == nil or string.len(account.hashpass) == 0) and (account.password == nil or string.len(account.password) == 0) then
 			log("debug", "account password not set or zero-length for username '%s' at host '%s'", username, module.host);
 			return nil, "Auth failed. Password invalid.";
-		end
+		end]]
 		return true;
 	end
 

mercurial