Hi,

On Tue, Jul 14, 2020 at 01:47:06PM -0400, Selva Nair wrote:
> Sorry for the long delay in getting back to this.. A few minor
> nitpicks on style follows:

Thanks for the review.  Indeed, my style fu was sort of absent when
I wrote this :-) (it's "mgetty+sendfax" style, with "I must remember
to use vim and :set expandtab!!!", but the braces always escape me...
and Antonio was busy elsewhere :) )

This...:

> On Tue, Jun 23, 2020 at 5:29 AM Gert Doering <g...@greenie.muc.de> wrote:
> > +                /* client wants deferred auth
> > +                 */
> > +                if ( strlen(ac_file_name) > 0 )
> > +                {
> > +                    if (do_deferred_pam_auth(fd, ac_file_name,
> > +                                             service, &up) < 0)
> > +                    {
> > +                        goto done;
> 
> Do we have to abort in this case? This will exit the background
> process and cripple the server while this could be a temporary memory
> pressure causing the fork to fail. Why not just break and plough
> along? The core will fail to get a response via the ac_file, but that
> could happen if the grand-child fails as well -- the server is
> supposed to cope with such failures.

... is something I need to look more closely at.  I remember that the
general approach to "mmmh, something failed!" here is "goto done", 
but your argument about "yeah, fork() failed, so what - try again
later!" has merits.

> Apart from these minor issues that could be corrected or ignored at
> merge time, all look good.

This is actually a code change, so I think I'll send a v3 with all
the nitpicks fixed (uncrustify is my friend :-) ) and this one changed.

> We should put the usage info into README.auth-pam as that seems to be
> the only documentation of the plugin. Also an entry in changelog?
> Could be a separate patch.

When I do a v3 anyway, I can add this as well.  Makes sense to have it
one commit.

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to