From eabf3417bc73ca9546a3ed489cd809ffdf303853 Mon Sep 17 00:00:00 2001
From: Damien Miller <djm@mindrot.org>
Date: Tue, 7 Dec 1999 14:56:27 +1100
Subject:  - Fix PAM account and session being called multiple times. Problem  
  reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>

---
 sshd.c | 43 ++++++++++++++++++++++++++++++-------------
 1 file changed, 30 insertions(+), 13 deletions(-)

(limited to 'sshd.c')

diff --git a/sshd.c b/sshd.c
index fa9eab74f..60d34d8b6 100644
--- a/sshd.c
+++ b/sshd.c
@@ -11,7 +11,7 @@
  */
 
 #include "includes.h"
-RCSID("$Id: sshd.c,v 1.33 1999/12/04 09:24:48 damien Exp $");
+RCSID("$Id: sshd.c,v 1.34 1999/12/07 03:56:27 damien Exp $");
 
 #include "xmalloc.h"
 #include "rsa.h"
@@ -1551,24 +1551,41 @@ do_authloop(struct passwd * pw)
 			get_remote_port(),
 			user);
 
-#ifdef HAVE_LIBPAM
-		do_pam_account_and_session(pw->pw_name, client_user);
+#ifndef HAVE_LIBPAM
+		if (authenticated)
+			return;
 
-		/* Clean up */
-		if (client_user != NULL)
-			xfree(client_user);
+		if (attempt > AUTH_FAIL_MAX)
+			packet_disconnect(AUTH_FAIL_MSG, pw->pw_name);
+#else /* HAVE_LIBPAM */
+		if (authenticated) {
+			do_pam_account_and_session(pw->pw_name, client_user);
 
-		if (password != NULL) {
-			memset(password, 0, strlen(password));
-			xfree(password);
-		}
-#endif /* HAVE_LIBPAM */
+			/* Clean up */
+			if (client_user != NULL)
+				xfree(client_user);
 
-		if (authenticated)
+			if (password != NULL) {
+				memset(password, 0, strlen(password));
+				xfree(password);
+			}
+			
 			return;
+		}
 
-		if (attempt > AUTH_FAIL_MAX)
+		if (attempt > AUTH_FAIL_MAX) {
+			/* Clean up */
+			if (client_user != NULL)
+				xfree(client_user);
+
+			if (password != NULL) {
+				memset(password, 0, strlen(password));
+				xfree(password);
+			}
+			
 			packet_disconnect(AUTH_FAIL_MSG, pw->pw_name);
+		}
+#endif /* HAVE_LIBPAM */
 
 		/* Send a message indicating that the authentication attempt failed. */
 		packet_start(SSH_SMSG_FAILURE);
-- 
cgit v1.2.3