mod_auth_internal_hashed: Don't assume user doesn't exist if no recognizable authentication data is found.
--- a/plugins/mod_auth_internal_hashed.lua Tue Jun 15 09:08:02 2010 +0500
+++ b/plugins/mod_auth_internal_hashed.lua Tue Jun 15 09:11:10 2010 +0500
@@ -100,10 +100,10 @@
log("debug", "account not found for username '%s' at host '%s'", username, module.host);
return nil, "Auth failed. Invalid username";
end
- if (account.hashpass == nil or string.len(account.hashpass) == 0) and (account.password == nil or string.len(account.password) == 0) then
+ --[[if (account.hashpass == nil or string.len(account.hashpass) == 0) and (account.password == nil or string.len(account.password) == 0) then
log("debug", "account password not set or zero-length for username '%s' at host '%s'", username, module.host);
return nil, "Auth failed. Password invalid.";
- end
+ end]]
return true;
end