Hang on pre-connect?

These are old archives. They are kept for historic purposes only.
Post Reply
Virtuall
Posts: 2
Joined: Sun Dec 04, 2005 10:20 pm
Location: Riga, Latvia
Contact:

Hang on pre-connect?

Post by Virtuall »

Hello,

I've been modifying AngryWolf's userauth module. It checks user/pass on HOOKTYPE_PRE_LOCAL_CONNECT and either lets user in or disconnects him. The question is: can it make the client just hang there instead of disconnecting him if the PASS is not supplied before NICK? That is, so the sequence USER, NICK, PASS would work too. Any ideas, pleeease?
As a human, I have a right to make a mistake, and I shall use it.
Jason
Posts: 570
Joined: Mon Jun 14, 2004 5:09 pm

Post by Jason »

I would think, just remove the code that drops the connection. But the password can then be brute forced. So set the shunned flag on his user record (look at tempshun for info)
Why the hell can't my signature be empty?
"Your message contains too few characters."
Virtuall
Posts: 2
Joined: Sun Dec 04, 2005 10:20 pm
Location: Riga, Latvia
Contact:

Post by Virtuall »

Jason wrote:But the password can then be brute forced.
more info on this please? :roll:

Edit: got it, added M_SHUN to AddCommand. UnrealIRCd rules! AngryWolf rules too! :D
As a human, I have a right to make a mistake, and I shall use it.
Jason
Posts: 570
Joined: Mon Jun 14, 2004 5:09 pm

Post by Jason »

1)
Connect.
PASS wrong
PASS alsowrong
PASS almostright
PASS RIGHT
Welcome.

That sort of thing. They dont need to establish a new connection to guess again.

2) Make sure it BOTH sets the user shunned after failed password, and ignores shunned users
Why the hell can't my signature be empty?
"Your message contains too few characters."
Post Reply