UnrealIRCd Forums

Hello,

I've been modifying AngryWolf's userauth module. It checks user/pass on HOOKTYPE_PRE_LOCAL_CONNECT and either lets user in or disconnects him. The question is: can it make the client just hang there instead of disconnecting him if the PASS is not supplied before NICK? That is, so the sequence USER, NICK, PASS would work too. Any ideas, pleeease?

I would think, just remove the code that drops the connection. But the password can then be brute forced. So set the shunned flag on his user record (look at tempshun for info)

Jason wrote:But the password can then be brute forced.

more info on this please?

Edit: got it, added M_SHUN to AddCommand. UnrealIRCd rules! AngryWolf rules too!

1)
Connect.
PASS wrong
PASS alsowrong
PASS almostright
PASS RIGHT
Welcome.

That sort of thing. They dont need to establish a new connection to guess again.

2) Make sure it BOTH sets the user shunned after failed password, and ignores shunned users