[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: large delays on failed authentication



On Thu, 27 Mar 1997, Andrew G. Morgan wrote:
> No, the delay should not provide any information about the availability (or
> not) of accounts on a system. This is known as a covert channel of
> information and the point of implementating pam_fail_delay was to avoid such
> things.

I agree. Still, "pam_fail_delay" only allows me to _in_crease the delay,
not decrease it, or so it seems. Did I just do something wrong or is that
just the way it works?
 
---/dev/il



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []