- (dtucker) [auth.c canohost.c canohost.h configure.ac defines.h loginrec.c]

[openssh.git] / auth.c

diff --git a/auth.c b/auth.c
index dfc1be37460c60834972bcdb30c3e7d10a973bf4..b6c00c12b25dc7551cc50a88d5b653b62610d9a2 100644 (file)
--- a/auth.c
+++ b/auth.c
@@ -244,7 +244,10 @@ auth_log(Authctxt *authctxt, int authenticated, char *method, char *info)
            info);
 
 #ifdef CUSTOM_FAILED_LOGIN
-       if (authenticated == 0 && strcmp(method, "password") == 0)
+       if (authenticated == 0 && !authctxt->postponed &&
+           (strcmp(method, "password") == 0 ||
+           strncmp(method, "keyboard-interactive", 20) == 0) ||
+           strcmp(method, "challenge-response") == 0)
                record_failed_login(authctxt->user,
                    get_canonical_hostname(options.use_dns), "ssh");
 #endif