894 |
case AUTH_REJECT: |
case AUTH_REJECT: |
895 |
auth_log(m, _("Rejected"), |
auth_log(m, _("Rejected"), |
896 |
NULL, NULL, NULL); |
NULL, NULL, NULL); |
897 |
|
newstate(as_reject); |
898 |
break; |
break; |
899 |
|
|
900 |
case AUTH_IGNORE: |
case AUTH_IGNORE: |
906 |
case AUTH_NOUSER: |
case AUTH_NOUSER: |
907 |
auth_log(m, _("Invalid user"), |
auth_log(m, _("Invalid user"), |
908 |
NULL, NULL, NULL); |
NULL, NULL, NULL); |
909 |
|
newstate(as_reject_cleanup); |
910 |
break; |
break; |
911 |
|
|
912 |
case AUTH_FAIL: |
case AUTH_FAIL: |
915 |
is_log_mode(m, RLOG_FAILED_PASS) ? |
is_log_mode(m, RLOG_FAILED_PASS) ? |
916 |
m->userpass : NULL, |
m->userpass : NULL, |
917 |
NULL, NULL); |
NULL, NULL); |
918 |
|
newstate(as_reject_cleanup); |
919 |
break; |
break; |
920 |
|
|
921 |
default: |
default: |
922 |
insist_fail("sfn_validate"); |
insist_fail("sfn_validate"); |
923 |
} |
} |
924 |
} |
} |
|
newstate(as_reject); |
|
925 |
auth_format_msg(m, MSG_ACCESS_DENIED); |
auth_format_msg(m, MSG_ACCESS_DENIED); |
926 |
|
return; |
927 |
} |
} |
928 |
|
|
929 |
rc = check_expiration(m); |
rc = check_expiration(m); |
1221 |
if (!pair) |
if (!pair) |
1222 |
return; |
return; |
1223 |
} |
} |
1224 |
/* Determine whether we need to use broken decoding */ |
|
1225 |
nas = nas_request_to_nas(req); |
if (pair->prop & AP_ENCRYPT_RFC2138) { |
1226 |
if (nas |
/* Determine whether we need to use broken decoding */ |
1227 |
&& (s = envar_lookup(nas->args, "broken_pass")) != NULL |
nas = nas_request_to_nas(req); |
1228 |
&& s[0] == '1') |
if (nas |
1229 |
decrypt_password_broken(password, pair, |
&& (s = envar_lookup(nas->args, "broken_pass")) != NULL |
1230 |
req->vector, req->secret); |
&& s[0] == '1') |
1231 |
else |
decrypt_password_broken(password, pair, |
1232 |
decrypt_password(password, pair, |
req->vector, req->secret); |
1233 |
req->vector, req->secret); |
else |
1234 |
|
decrypt_password(password, pair, |
1235 |
|
req->vector, req->secret); |
1236 |
|
} else if (pair->prop & AP_ENCRYPT_RFC2868) { |
1237 |
|
u_char tag; /* FIXME: not accessible for user */ |
1238 |
|
decrypt_tunnel_password(password, |
1239 |
|
&tag, pair, |
1240 |
|
req->vector, req->secret); |
1241 |
|
} |
1242 |
} |
} |