An example:
As late as v2.0.0, irods.connections.ALLOW_PAM_LONG_TOKENS defaults to True but may be set to False as a guard against switching from the use of the regular api [1201 = AUTH_PLUG_REQ_AN] over to api [725 = PAM_AUTH_REQUEST_AN] which permits longer PAM passwords (or ones containing '=' or ';') to be used. Either this setting should be a configuration option or it should be omitted, as its current usage (simply setting the global) is open to potential problems, abuse, or at the worst denial-of-service style attacks.
An example:
As late as v2.0.0,
irods.connections.ALLOW_PAM_LONG_TOKENSdefaults to True but may be set to False as a guard against switching from the use of the regular api [1201 = AUTH_PLUG_REQ_AN] over to api [725 = PAM_AUTH_REQUEST_AN] which permits longer PAM passwords (or ones containing '=' or ';') to be used. Either this setting should be a configuration option or it should be omitted, as its current usage (simply setting the global) is open to potential problems, abuse, or at the worst denial-of-service style attacks.