Changeset

2209:adbedc32d41b

Fail if username or password don't pass SASLprep.
author Tobias Markmann <tm@ayena.de>
date Thu, 19 Nov 2009 17:08:58 +0100
parents 2208:2dc746323de6
children 2210:78c9b5255b27
files util/sasl/plain.lua
diffstat 1 files changed, 2 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/util/sasl/plain.lua	Thu Nov 19 16:44:37 2009 +0100
+++ b/util/sasl/plain.lua	Thu Nov 19 17:08:58 2009 +0100
@@ -34,7 +34,8 @@
 	password = saslprep(password);
 	
 	if (not password) or (password == "") or (not authentication) or (authentication == "") then
-		log("debug", "Username or password violates either SASLprep.");
+		log("debug", "Username or password violates SASLprep.");
+		return "failure", "malformed-request";
 	end
 
 	local correct, state = false, false;