Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

windows下密码输入错误会卡很长时间。 #276

Closed
ssmmtt opened this issue Nov 19, 2021 · 11 comments
Closed

windows下密码输入错误会卡很长时间。 #276

ssmmtt opened this issue Nov 19, 2021 · 11 comments
Assignees
Labels
bug Something isn't working

Comments

@ssmmtt
Copy link

ssmmtt commented Nov 19, 2021

windows下密码输入错误会卡很长时间。

@kingToolbox
Copy link
Owner

How long do you have to wait each time? Usually several seconds or tens of seconds are normal. WindTerm uses the PBKDF2 algorithm, which makes it necessary to perform a lot of calculations every time the master password is verified to avoid being brute force cracked locally.

Depending on the performance of your machine, each calculation usually takes a few seconds, so that no more than 80,000 password combinations can be tried every day, which greatly reduces the possibility of brute force cracking.

@funkpopo
Copy link

在保证本地环境较为安全的前提下可以优先考虑使用弱密码。这将在一定程度上相对减少密码校验的时间。
The use of weak passwords can be a priority while keeping the local environment secure. This will reduce the time for password validation to some extent.

@ssmmtt
Copy link
Author

ssmmtt commented Nov 21, 2021

动画
@kingToolbox

@gooker
Copy link

gooker commented Nov 22, 2021

I have a similar situation. I modify the virtual machine IP, then modify the IP in the window , press enter, enter the user name, and then enter the password. It will be stuck for a long time

@funkpopo
Copy link

funkpopo commented Nov 22, 2021

@kingToolbox
Have just checked this problem. The new session creation works well on WindTerm 2.2.0 when using CentOS/ Kali and Ubuntu
When I tried to create a new session, the default connection has been set as "ssh: notty", as shown in the image down below. I just created a virtual machine then login with the local platform and used the newest version of WindTerm.
image

Regarding the above bug, after repeated testing, it was confirmed that the newly created session would be stuck after entering the password and clicking "Confirm". After clicking "Cancel", an authentication error and a new password window will pop up, and the connection cannot be successfully established at this link. Shown as the result down below.
image

By the way, every session that has been created successfully before the new version v2.2.0 was released can be used with no problem. And the session info which was saved into the /profiles/../terminal/user.sessions is different from the old session infos. I will paste a sample here. The "Euler OS" is a CentOS-based version of Linux.
image

Re-checked this morning
Found out that when I try to make the connection with CentOS 7 Linux, virtual machine and bare metal both works well, but the Euler OS ( based on CentOS), I can not establish a connection successfully due to a "ssh:notty" failure info, this may be the main reason of this issue.

Possible sources of the problem:

  1. You may accidentally change the default settings of creating a new session with the unavailable "ssh:notty" that caused the establishment failure.
  2. May exist some default session conflicts of the ssh settings with target systems.
  3. There may be some undiscovered possible causes I have not found out yet...

@kingToolbox
Copy link
Owner

Sorry, I thought it was master password before, but when I saw the screenshot, I realized that it was the SSH session password.

It should be noted that after clicking Continue in the login wizard, WindTerm was not actually stuck, but is waiting for the server to return the login result. At this time, you can still change your password and click Continue again. If the password is correct, the login will be successful immediately.

In order to avoid this misunderstanding, I will add some tips after clicking Continue.

BTW:
When the login fails, WindTerm_2.2.0 will try to automatically log in three more times, with an interval of 500 millisecond between each login. This design is to avoid as much as possible the login failure caused by accidental network interruption. But apart from this, there is no additional overhead. All waiting time depends entirely on the processing time of the network and server.

@kingToolbox
Copy link
Owner

@funkpopo
Thank you for doing such a detailed test and giving a proper analysis.

@ssmmtt
Copy link
Author

ssmmtt commented Nov 22, 2021

恩 最好是提示一下鉴权失败。

@kingToolbox kingToolbox self-assigned this Nov 24, 2021
@kingToolbox kingToolbox added the bug Something isn't working label Nov 24, 2021
@kingToolbox
Copy link
Owner

I am happy to inform you that WindTerm_2.2.1 has been released and this issue has been fixed, now when the login fails, an error message will be displayed in time, please download and check it, thank you.

@ssmmtt
Copy link
Author

ssmmtt commented Nov 25, 2021

nice,It works !
image

@kingToolbox
Copy link
Owner

Okey, this issue has been solved and will be closed. Welcome to continue submitting new feature requests and bugs, thank you.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

4 participants