root/campo-sirio
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Patch level : 4.0 880

Browse Source 
Files correlati     :  Authoriz.exe (molti programmi)
Ricompilazione Demo : [ ]
Commento     :

I programmi uguali su Terminal Server generano chiavi uguali se chiamati in sequenza e dop otto tentativi AUthoriz li rifiuta

Modificati

1) Authoriz

E' possibile definire il numero massimo di tentativi (MaxTries) prima di rifiutare una connessione

2) nei programmi

Aggiunta un chiamata srand prima di generare le password per ridurre la possibilità di password identiche


git-svn-id: svn://10.65.10.50/trunk@16188 c028cbd2-c16b-5b4b-a496-9718f37d4682
This commit is contained in:
alex 2008-02-17 19:27:33 +00:00
parent 0417b13978
commit d096813c81
2 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
include/isamrpc.cpp
View File

@ -217,6 +217,10 @@ static unsigned int CreatePassword(TString& pass)
{
const int BASE = 19;
unsigned int num = 0;
time_t lt; time(&lt);
struct tm* t = localtime(&lt);
srand(t->tm_hour * 10000 + t->tm_min *100 + t->tm_sec);
do
{
num = 883*rand();

7
server/authoriz.cpp
View File

@ -150,6 +150,7 @@ private:
wxString m_strLastPassword;
wxString m_strLastApp;
unsigned int m_nPwdCount;
unsigned int m_MaxTries;
TUserTable m_Users;
@ -770,7 +771,7 @@ unsigned int TAuthorizationServer::DecodePassword(const wxChar* strPassword, con
else
m_nPwdCount++;
if (m_nPwdCount < 8)
if (m_nPwdCount < m_MaxTries)
{
// Creo la risposta: metà di num reso divisibile per 883
num /= 2;
@ -918,6 +919,10 @@ bool TAuthorizationServer::Initialization()
::GlobalAddAtom(ATOMIC_SEMAPHORE); // Same as old Frontend.exe
#endif
const int delay = GetConfigInt("Delay", 10);
m_MaxTries = GetConfigInt("MaxTries", 8);
if (m_MaxTries < 8)
m_MaxTries = 8;
for (int i = 0; i < 3; i++)
{