##// END OF EJS Templates
auth: don't break hashing in case of user with empty password....
auth: don't break hashing in case of user with empty password. In some cases such as LDAP user created via external scripts users might set the passwords to empty. The hashing uses the md5(password_hash) to store reference to detect password changes and forbid using the same password. In case of pure LDAP users this is not valid, and we shouldn't raise Errors in such case. This change makes it work for empty passwords now.

File last commit:

r1:854a839a default
r2203:8a18c3c3 default
Show More
release-notes-3.8.1.rst
28 lines | 542 B | text/x-rst | RstLexer

|RCE| 3.8.1 |RNS|

Release Date

  • 2016-03-10

General

  • Fixed the problem due to a missing index when migrating from very old databases.
  • Fixed problem with being unable to delete users which have set permissions on user groups.

Authentication

  • Take user group base DN in LDAP filtering.

API

  • Better error handling if an inactive user account is used to make an API call.

VCS Server

  • Avoid error message around missing “object_store” being printed in logs.