summaryrefslogtreecommitdiff
path: root/auth1.c
diff options
context:
space:
mode:
Diffstat (limited to 'auth1.c')
-rw-r--r--auth1.c12
1 files changed, 10 insertions, 2 deletions
diff --git a/auth1.c b/auth1.c
index 2a9d18b9a..aeb5d8cb9 100644
--- a/auth1.c
+++ b/auth1.c
@@ -247,8 +247,12 @@ do_authloop(Authctxt *authctxt)
247#else 247#else
248 /* Special handling for root */ 248 /* Special handling for root */
249 if (authenticated && authctxt->pw->pw_uid == 0 && 249 if (authenticated && authctxt->pw->pw_uid == 0 &&
250 !auth_root_allowed(get_authname(type))) 250 !auth_root_allowed(get_authname(type))) {
251 authenticated = 0; 251 authenticated = 0;
252# ifdef AUDIT_EVENTS
253 PRIVSEP(audit_event(LOGIN_ROOT_DENIED));
254# endif
255 }
252#endif 256#endif
253 257
254#ifdef USE_PAM 258#ifdef USE_PAM
@@ -283,8 +287,12 @@ do_authloop(Authctxt *authctxt)
283 if (authenticated) 287 if (authenticated)
284 return; 288 return;
285 289
286 if (authctxt->failures++ > options.max_authtries) 290 if (authctxt->failures++ > options.max_authtries) {
291#ifdef AUDIT_EVENTS
292 PRIVSEP(audit_event(LOGIN_EXCEED_MAXTRIES));
293#endif
287 packet_disconnect(AUTH_FAIL_MSG, authctxt->user); 294 packet_disconnect(AUTH_FAIL_MSG, authctxt->user);
295 }
288 296
289 packet_start(SSH_SMSG_FAILURE); 297 packet_start(SSH_SMSG_FAILURE);
290 packet_send(); 298 packet_send();