Hi Gert.

On Thu, Mar 10, 2022 at 3:13 PM Gert Doering <g...@greenie.muc.de> wrote:

> Yes, your report triggered this work.  I think I misunderstood the
> original scenario (I thought it involved two plugins both going
> "deferred"), but this patch introduces a "short circuit" approach
> to plugin authentication where anything that fails will immediately
> abort all other plugin calls.  So, it will fix that scenario(*).
>

You didn't misunderstand; they were always two separate issues.  I just
noticed the multiple-deferred issue when I was reviewing the code for why
it wasn't failing on the first fail.  The multiple-deferred issue I brought
to the sec list, and I submitted https://patchwork.openvpn.net/patch/2071/
as a possible fix for the other.  It's likely moot now with your other
updates.

Thanks for the multi-auth plugin source.  I'll try to make the community
IRC on the 12th; it's just real early for me.
--
Pete
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to