Have keyboard-interactive code call the drivers even for responses for

invalid logins.  This allows the drivers themselves to decide how to handle
them and prevent leaking information where possible.  Existing behaviour for
bsdauth is maintained by checking authctxt->valid in the bsdauth driver.
Note that any third-party kbdint drivers will now need to be able to handle
responses for invalid logins.  ok markus@

0 files changed, 0 insertions, 0 deletions