Detect password usage based on token length
The client protocol module can resolve whether a password was used based on the information the authenticators gather before authentication is done. It uses the authentication token length as the basis on which it makes the decision.
This commit is contained in:
@ -238,12 +238,6 @@ int validate_mysql_user(sqlite3 *handle, DCB *dcb, MYSQL_session *session,
|
||||
rval = MXS_AUTH_FAILED_DB;
|
||||
}
|
||||
}
|
||||
else if (session->auth_token_len)
|
||||
{
|
||||
/** If authentication fails, this will trigger the right
|
||||
* error message with `Using password : YES` */
|
||||
session->client_sha1[0] = '_';
|
||||
}
|
||||
}
|
||||
|
||||
return rval;
|
||||
|
Reference in New Issue
Block a user