u/pc/rhodecode-enterprise-ce-fork-pc Files · docs/release-notes/release-notes-4.7.1.rst

auth: don't break hashing in case of user with empty password....

auth: don't break hashing in case of user with empty password. In some cases such as LDAP user created via external scripts users might set the passwords to empty. The hashing uses the md5(password_hash) to store reference to detect password changes and forbid using the same password. In case of pure LDAP users this is not valid, and we shouldn't raise Errors in such case. This change makes it work for empty passwords now.

marcink - - Load All Authors

File last commit:

r1637:c3a8855b stable


                r2203:8a18c3c3

default

Download file

             release-notes-4.7.1.rst
        
                    43 lines
            
             | 576 B
            
                | text/x-rst
            
             |
                RstLexer
            
             / docs / release-notes / release-notes-4.7.1.rst
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        marcink
    
docs: added release notes for 4.7.1

              r1637
            
      |RCE| 4.7.1 |RNS|

      -----------------

      Release Date

      ^^^^^^^^^^^^

      - 2017-04-13

      New Features

      ^^^^^^^^^^^^

      General

      ^^^^^^^

      Security

      ^^^^^^^^

      - Auth plugins: don't expose sensitive information inside DEBUG log for auth

        plugins (such as ldap access passwords).

        Each plugin now defines a black-list of arguments to hide from logging.

      Performance

      ^^^^^^^^^^^

      Fixes

      ^^^^^

      - Largefiles: fix errors on fetching largefiles from web interface when viewing

        from specific branch.

      - User Admin: fix problem with sorting for Mysql database.

      Upgrade notes

      ^^^^^^^^^^^^^

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

marcink docs: added release notes for 4.7.1	r1637	\|RCE\| 4.7.1 \|RNS\|
		-----------------

		Release Date
		^^^^^^^^^^^^

		- 2017-04-13


		New Features
		^^^^^^^^^^^^



		General
		^^^^^^^


		Security
		^^^^^^^^

		- Auth plugins: don't expose sensitive information inside DEBUG log for auth
		plugins (such as ldap access passwords).
		Each plugin now defines a black-list of arguments to hide from logging.


		Performance
		^^^^^^^^^^^



		Fixes
		^^^^^

		- Largefiles: fix errors on fetching largefiles from web interface when viewing
		from specific branch.
		- User Admin: fix problem with sorting for Mysql database.


		Upgrade notes
		^^^^^^^^^^^^^