##// END OF EJS Templates
auth: don't break hashing in case of user with empty password....
auth: don't break hashing in case of user with empty password. In some cases such as LDAP user created via external scripts users might set the passwords to empty. The hashing uses the md5(password_hash) to store reference to detect password changes and forbid using the same password. In case of pure LDAP users this is not valid, and we shouldn't raise Errors in such case. This change makes it work for empty passwords now.

File last commit:

r182:04c494ee stable
r2203:8a18c3c3 default
Show More
release-notes-4.1.2.rst
16 lines | 346 B | text/x-rst | RstLexer
/ docs / release-notes / release-notes-4.1.2.rst
docs: added release notes for release 4.1.2
r182 |RCE| 4.1.2 |RNS|
-----------------
Release Date
^^^^^^^^^^^^
- 2016-06-16
Fixes
^^^^^
- ssl: fixed http middleware so it works correctly with pyramid views. This
fixed http -> https redirection problems on login.
- ldap: fixed ldap usergroup authentication plugin so after upgrade it's
possible to change the settings again (EE only).