[tpop3d-discuss] Patch to prevent brute force password cracking

Jason Clifford jason at ukpost.com
Wed, 16 Oct 2002 13:45:51 +0100 (BST)


On Wed, 16 Oct 2002, Marcin Sochacki wrote:

> > (One other thing to point out is that if you are
> > authenticating using PAM, certain PAM modules incorporate
> > delays when an incorrect password is received. This
> > freezes the whole daemon -- and all connections in the
> > authorisation state. I hate PAM....)
> 
> BTW: does anyone know a quick trick to turn off that feature of PAM?
> I'm using Debian woody and potato.

In your service configuration file specify the nodelay option to the 
pam_unix.so module.

Jason Clifford
-- 
UKPOST.COM	 	           get your @ukpost.com address now...
http://www.ukpost.com/	 	   professional hosting and colocation