- markus@cvs.openbsd.org 2003/08/26 09:58:43

     [auth-passwd.c auth.c auth.h auth1.c auth2-none.c auth2-passwd.c]
     [auth2.c monitor.c]
     fix passwd auth for 'username leaks via timing'; with djm@, original
     patches from solar

1 files changed, 2 insertions, 2 deletions

diff --git a/auth2-passwd.c b/auth2-passwd.c
index 8eb18f2e3..67fb4c921 100644
--- a/auth2-passwd.c
+++ b/auth2-passwd.c
@@ -23,7 +23,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: auth2-passwd.c,v 1.3 2003/04/08 20:21:28 itojun Exp $");
+RCSID("$OpenBSD: auth2-passwd.c,v 1.4 2003/08/26 09:58:43 markus Exp $");
 
 #include "xmalloc.h"
 #include "packet.h"
@@ -47,7 +47,7 @@ userauth_passwd(Authctxt *authctxt)
                 logit("password change not supported");
         password = packet_get_string(&len);
         packet_check_eom();
-        if (PRIVSEP(auth_password(authctxt, password)) == 1 && authctxt->valid
+        if (PRIVSEP(auth_password(authctxt, password)) == 1
 #ifdef HAVE_CYGWIN
             && check_nt_auth(1, authctxt->pw)
 #endif