sleep and fake pam Authentication Failure message if nonexistant username is given

diff --git a/ckuus7.c b/ckuus7.c
index 5a73d12..8801478 100644 (file)
--- a/ckuus7.c
+++ b/ckuus7.c
@@ -14908,6 +14908,12 @@ ckxlogin(userid, passwd, acct, promptok)
     if (ok) {
         ok = zvpass((char *)passwd);    /* Check password */
         debug(F101,"ckxlogin zvpass","",ok);
+#ifdef CK_PAM
+    } else {
+       /* Fake pam password failure for nonexistent users */
+       sleep(1);
+       printf("Authentication failure\n");
+#endif
     }
 
     if (ok > 0 && isguest) {