connclass: verify a KDF class password off the core thread with a registration hold (auth_pending + Event::ConnclassAuth) — connect floods can't freeze the server

This commit is contained in:
Jean Chevronnet 2026-08-12 13:13:27 +00:00
parent 2b3495be65
commit c231c6b8ef
4 changed files with 113 additions and 25 deletions

View file

@ -294,6 +294,7 @@ pub struct User {
pub registered: bool,
pub dns_pending: bool, // holding registration for a reverse-DNS lookup
pub ident_pending: bool, // holding registration for an ident (RFC1413) lookup
pub auth_pending: bool, // holding registration for an off-core connect-class password verify
pub waitpong: Option<String>, // conn_waitpong: cookie the client must PONG before registering
pub class: Option<String>, // connectclass: assigned connection class name
pub pass: Option<String>, // password sent via PASS (for connectclass passwords)