When using both SRP and non-default additional trusted authentication plugin an error is raised when providing illegal password for SRP:
Execute statement error at attach :335544726 : Error reading data from the connection.
Data source : Firebird::localhost:c:\some\db.fdb.
At block line: 3, col: 4.
Description
When using both SRP and non-default additional trusted authentication plugin an error is raised when providing illegal password for SRP:
Execute statement error at attach :335544726 : Error reading data from the connection.
Data source : Firebird::localhost:c:\some\db.fdb.
At block line: 3, col: 4.
SRP client after successful second phase of handshake places adds wire crypt key to the list of known keys. That happens even in a case when SRP server later rejects authentication due to invalid password. If next plugin later adds wire crypt key of same type client has no way to distinguish between 2 keys and select first one.
Currently that's fixed by using correct direction (down, not up) of keys' scanning at client side.
Alexander Peshkov added a comment - 06/Dec/19 03:32 PM SRP client after successful second phase of handshake places adds wire crypt key to the list of known keys. That happens even in a case when SRP server later rejects authentication due to invalid password. If next plugin later adds wire crypt key of same type client has no way to distinguish between 2 keys and select first one.
Currently that's fixed by using correct direction (down, not up) of keys' scanning at client side.
Currently that's fixed by using correct direction (down, not up) of keys' scanning at client side.