At this point in the authentication process, we don't need to get the actual authentication status. We need to call AceContinueAuth() because more data is required by the authentication context.
From the Developer's Guide:
"The AceStartAuth function provides the first step in authenticating with the
RSA SecurID protocol using the synchronous API.
If the function returns successfully, then your code calls AceContinueAuth with the
required passcode. Your code continues to call AceContinueAuth until no more data is
required by the authentication context, or an error occurs."
This is what's going on:
First, the user enters a username, and then AceStartAuth() is called. When AceStartAuth() successfully returns, moreData = true, so the user is then prompted for a passcode. In response, the user enters their tokencode according to the one being displayed on their authenticator. Then, AceContinueAuth() is called. Provided the username/tokencode combination is valid, when it returns:
- The return value should be ACM_OK = 0, which indicates it was a successful call
- moreData = true, indicating that more data is required by the authentication context. According to the section of the developer's guide that I quoted above, this means that we should call AceContinueAuth() again.
- promptStr = "To continue, you must accept a new PIN generated by the system. Are you ready to have the system generate your PIN? (y/n) "
The user then enters "y", and AceContinueAuth() is called again because moreData = true. However, this time around, AceContinueAuth() returns 6 and not ACM_OK = 0.
Basically, according to the documentation, any value other than 0 that AceContinueAuth() returns is indicative of the fact that something went wrong. I'd like to know two things:
1.) What went wrong?
2.) What meaning does a return value of 6 have? It's not listed in the documentation as one of the return values for AceContinueAuth()
