XXX comment in the logic which sends failed password auth back to username

[u/mdw/putty] / ssh.c

diff --git a/ssh.c b/ssh.c
index 461ade6..8c71e6d 100644 (file)
--- a/ssh.c
+++ b/ssh.c
@@ -5020,6 +5020,8 @@ static void do_ssh2_authconn(Ssh ssh, unsigned char *in, int inlen, int ispkt)
                        logevent("Access denied");
                        if (s->type == AUTH_TYPE_PASSWORD &&
                            ssh->cfg.change_username) {
+                           /* XXX perhaps we should allow
+                            * keyboard-interactive to do this too? */
                            s->we_are_in = FALSE;
                            break;
                        }