X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/blobdiff_plain/bcb7e50250111ebfd299355783201223097212bd..c8e78d87ad420c06f6b1688ef8d2e86a01c6bc76:/authenticate.c

diff --git a/authenticate.c b/authenticate.c
index 4f4aac22..c3a3c184 100644
--- a/authenticate.c
+++ b/authenticate.c
@@ -142,6 +142,7 @@ int auth_server(int fd, int module, char *addr, char *leader)
 	char secret[100];
 	char pass[30];
 	char pass2[30];
+	char *tok;
 
 	/* if no auth list then allow anyone in! */
 	if (!users || !*users) return 1;
@@ -163,6 +164,18 @@ int auth_server(int fd, int module, char *addr, char *leader)
 		return 0;
 	}
 
+	users = strdup(users);
+	if (!users) return 0;
+
+	for (tok=strtok(users," ,\t"); tok; tok = strtok(NULL," ,\t")) {
+		if (strcmp(tok, user) == 0) break;
+	}
+	free(users);
+
+	if (!tok) {
+		return 0;
+	}
+	
 	memset(secret, 0, sizeof(secret));
 	if (!get_secret(module, user, secret, sizeof(secret)-1)) {
 		memset(secret, 0, sizeof(secret));