Thanks for the 'patches' to the modules!

> 1. Update Authen::Smb like so:
> 
> use Fcntl qw(:flock);
> ...
> open S, "> /full/path/to/AuthenSmb.lck" or
> die "Can't open AuthenSmb.lck: $!\n";
> flock S, LOCK_EX;
> my $res = Valid_User($username, $password, $server, $backup, $domain);
> close S;

What happens, if two or more users are trying to
access at the same time? As I understood this piece
of code, will the first request lock the file and
all other requests at almost the same time are
dropped. This seems not very secure to me, or did
I understand something wrong?

Wouldn't it make more sense, to create a file
ie with the username's MD5 hash and then flock this
one?

-mathias-

-- 
Reporting bugs: http://perl.apache.org/bugs/
Mail list info: http://perl.apache.org/maillist/modperl.html

Reply via email to