LoginPassword event is fired when the client tries to
authenticate with the server using his Login and Password. At this
point, you should test these values against one stored in
your code (or your database of users), and set Action argument accordingly. So, if you find
that user provided valid Login and Password - set
Action = Allow. If he
didn't provide valid information, set Action = Deny. wodFTPServer will allow
3 attempts for the client to login before he gets
disconnected.
You can also set User.UseNTAuthentication
property to True, so the client's credentials
are validated by your NT system, not by yourself. Or, you
can change Login and Password properties from within
LoginPassword event code, and send them 'faked' to
NT validation. This is your choice.
Even if you set Action =
Allow, doesn't mean client is authenticated
immediately. Still, it's possible that you set Authentication
property to require both the password and the certificate -
in which case wodFTPServer will wait for certificate
information as well. You should wait for Connected event
when user finally manages to connect.