[zeromq-dev] zauth vs linger time

[Pieter Hintjens]

On Tue, Dec 10, 2013 at 11:30 AM, Sean Robertson <sprobertson at gmail.com> wrote:

> After some prodding it became apparent that letting the server thread
> sleep a little longer (another 100ms) the authentication mechanism
> would kick in and deny the client connection due to the now bogus
> whitelist of 227.0.0.2. Interesting.
>
> I'm still quite a bit confused by it, potentially due to my perilously
> weak grasp of C. Did the fact that the linger time was set (100ms)
> longer than the zauth mechanism allow the client to read the lingering
> message?

Are you using the latest master of CZMQ? There was an issue where the
zauth constructor didn't wait for the background agent to start up.
Thus creating a zauth object and immediately connecting could slip
through authentication. That was fixed a while back.

-Pieter