]> The Tcpdump Group git mirrors - libpcap/commit
Don't distinguish between invalid user name and invalid password.
authorGuy Harris <[email protected]>
Sun, 3 Feb 2019 21:35:17 +0000 (13:35 -0800)
committerGuy Harris <[email protected]>
Sun, 3 Feb 2019 21:35:17 +0000 (13:35 -0800)
commit4ca180196867f61ebafceac73d699e3d5d227b2e
treee9b5897d07ba45eb1000a8fc059fa54d81906dfd
parentdb93927485d0442d81a8010548f33ecd0ad24b27
Don't distinguish between invalid user name and invalid password.

That makes brute-forcing harder, as a brute-forcing client isn't told
that it can give up on a given user name.  (Perhaps it can guess that
based on how quickly we say "no".)
rpcapd/daemon.c