Compare Token from LDAP and Input Against Configured Length

Yubico / yubico-pam

Yubico Pluggable Authentication Module (PAM)

https://developers.yubico.com/yubico-pam

BSD 2-Clause "Simplified" License

686 stars 115 forks source link

Compare Token from LDAP and Input Against Configured Length #200

Closed marc-sensenich closed 5 years ago

marc-sensenich commented 5 years ago

When retrieving the token from LDAP the strncmp should not be against the length of either the input or the value from LDAP, but from the configured token length expected by the module.

klali commented 5 years ago

Thanks! merging.