Displaying 1 result from an estimated 1 matches for "auth_penalty_lookup".
2011 May 08
0
Issues with authentication failure delays
...15.5039038658
(Note that these results are with auth_failure_delay set to 0, more on
that in a bit.) Aside from the extra half second on each attempt (which
I have no clue about), there is no delay on the first attempt.
Subsequent delays seem to have the correct timing. I *think* this is
because auth_penalty_lookup is called from
auth_request_handler_auth_begin, that is, at the *beginning* of an
authentication attempt, therefore not affecting the first failed
attempt.
This may be too minor an issue to worry much about, but it certainly
looks to me like it's not doing quite what was intended.
Moving on t...