- markus@cvs.openbsd.org 2003/04/16 14:35:27

     [auth.h]
     document struct Authctxt; with solar

2 files changed, 19 insertions, 7 deletions

diff --git a/ChangeLog b/ChangeLog
index 0d22a9f81..4f54c69b1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -18,6 +18,13 @@
    - markus@cvs.openbsd.org 2003/04/14 14:17:50
      [channels.c sshconnect.c sshd.c ssh-keyscan.c]
      avoid hardcoded SOCK_xx; with itojun@; should allow ssh over SCTP
+   - mouring@cvs.openbsd.org 2003/04/14 21:31:27
+     [sftp-int.c]
+     Missing globfree(&g) in process_put() spotted by Vince Brimhall
+     <VBrimhall@novell.com>.  ok@ Theo
+   - markus@cvs.openbsd.org 2003/04/16 14:35:27
+     [auth.h]
+     document struct Authctxt; with solar
 
 20030512
  - (djm) Redhat spec: Don't install profile.d scripts when not 
@@ -1405,4 +1412,4 @@
      save auth method before monitor_reset_key_state(); bugzilla bug #284;
      ok provos@
 
-$Id: ChangeLog,v 1.2682 2003/05/14 03:42:23 djm Exp $
+$Id: ChangeLog,v 1.2683 2003/05/14 03:43:25 djm Exp $
diff --git a/auth.h b/auth.h
index 81d9655f7..776e4195c 100644
--- a/auth.h
+++ b/auth.h
@@ -1,5 +1,4 @@
-/*      $OpenBSD: auth.h,v 1.41 2002/09/26 11:38:43 markus Exp $        */
-/*      $FreeBSD: src/crypto/openssh/auth.h,v 1.10 2003/03/31 13:45:36 des Exp $        */
+/*      $OpenBSD: auth.h,v 1.42 2003/04/16 14:35:27 markus Exp $        */
 
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
@@ -49,13 +48,13 @@ typedef struct KbdintDevice KbdintDevice;
 
 struct Authctxt {
         int              success;
-        int              postponed;
-        int              valid;
+        int              postponed;     /* authentication needs another step */
+        int              valid;         /* user exists and is allowed to login */
         int              attempt;
         int              failures;
-        char            *user;
+        char            *user;          /* username sent by the client */
         char            *service;
-        struct passwd   *pw;
+        struct passwd   *pw;            /* set if 'valid' */
         char            *style;
         void            *kbdintctxt;
 #ifdef BSD_AUTH
@@ -72,6 +71,12 @@ struct Authctxt {
         char            *krb5_ticket_file;
 #endif
 };
+/*
+ * Every authentication method has to handle authentication requests for
+ * non-existing users, or for users that are not allowed to login. In this
+ * case 'valid' is set to 0, but 'user' points to the username requested by
+ * the client.
+ */
 
 struct Authmethod {
         char    *name;