[pve-devel] r4911 - pve-access-control/trunk

[svn-commits at proxmox.com]

Author: dietmar
Date: 2010-07-19 07:21:43 +0000 (Mon, 19 Jul 2010)
New Revision: 4911

Modified:
   pve-access-control/trunk/AccessControl.pm
   pve-access-control/trunk/ChangeLog
Log:
always add timeout
	after failed auth


Modified: pve-access-control/trunk/AccessControl.pm
===================================================================
--- pve-access-control/trunk/AccessControl.pm	2010-07-19 07:19:06 UTC (rev 4910)
+++ pve-access-control/trunk/AccessControl.pm	2010-07-19 07:21:43 UTC (rev 4911)
@@ -574,8 +574,9 @@
 	}
     }
 
+    sleep(2); # timeout after failed auth
+
     die "domain \'$domain\' not defined\n" if !$found;
-    sleep(2) if $errmsg;
     die $errmsg || "internal error";
 }
 

Modified: pve-access-control/trunk/ChangeLog
===================================================================
--- pve-access-control/trunk/ChangeLog	2010-07-19 07:19:06 UTC (rev 4910)
+++ pve-access-control/trunk/ChangeLog	2010-07-19 07:21:43 UTC (rev 4911)
@@ -1,3 +1,8 @@
+2010-07-19  Proxmox Support Team  <support at proxmox.com>
+
+	* AccessControl.pm (authenticate_user_domain): always add timeout
+	after failed auth
+
 2010-07-19  Seth Lauzon <seth.lauzon at gmail.com>
 
 	* AccessControl.pm: fixed timeout for ldap/AD errors and reduced to two seconds