[RADIATOR] Bug in HOTP verification

[Gopstein, Richard]

Authentication fails for HOTP values with a leading zero.

In AuthSQLHOTP.pm,

if ($hotp eq $code)
               {
                   $found++;
                   $bad_logins = 0;
                   ($counter_high, $counter_low) = ($temp_high, $temp_low);
                   last;
               }

    }

Fails the string to numeric comparison when there is a leading zero. Setting $hotp = sprintf("%06d",$hotp) fixes the symptom.

Rich


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20090416/de0ecc28/attachment.html>