[389-ds-base/f15] fix unhashed user password visibility issues

Richard Allen Megginson rmeggins at fedoraproject.org
Thu Jun 21 21:27:33 UTC 2012


commit f5adc96c35acf03155c9dd96e1ab6514a927674e
Author: Rich Megginson <rmeggins at redhat.com>
Date:   Thu Jun 21 15:25:59 2012 -0600

    fix unhashed user password visibility issues
    
    Ticket #378 - audit log does not log unhashed password: enabled, by default.
    Ticket #378 - unhashed#user#password visible after changing password
    Ticket #365 - passwords in clear text in the audit log

 .gitignore               |    1 +
 389-ds-base-git-local.sh |    2 +-
 389-ds-base-git.sh       |    2 +-
 389-ds-base.spec         |    7 ++++++-
 sources                  |    2 +-
 5 files changed, 10 insertions(+), 4 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 40bd07e..2382b0f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -47,3 +47,4 @@
 /389-ds-base-1.2.10.8.tar.bz2
 /389-ds-base-1.2.10.9.tar.bz2
 /389-ds-base-1.2.10.10.tar.bz2
+/389-ds-base-1.2.10.11.tar.bz2
diff --git a/389-ds-base-git-local.sh b/389-ds-base-git-local.sh
index 8948e9a..c40c9b6 100644
--- a/389-ds-base-git-local.sh
+++ b/389-ds-base-git-local.sh
@@ -2,7 +2,7 @@
 
 DATE=`date +%Y%m%d`
 # use a real tag name here
-VERSION=1.2.10.10
+VERSION=1.2.10.11
 PKGNAME=389-ds-base
 TAG=${TAG:-$PKGNAME-$VERSION}
 #SRCNAME=$PKGNAME-$VERSION-$DATE
diff --git a/389-ds-base-git.sh b/389-ds-base-git.sh
index a8772d4..9215436 100644
--- a/389-ds-base-git.sh
+++ b/389-ds-base-git.sh
@@ -2,7 +2,7 @@
 
 DATE=`date +%Y%m%d`
 # use a real tag name here
-VERSION=1.2.10.10
+VERSION=1.2.10.11
 PKGNAME=389-ds-base
 TAG=${TAG:-$PKGNAME-$VERSION}
 URL="http://git.fedorahosted.org/git/?p=389/ds.git;a=snapshot;h=$TAG;sf=tgz"
diff --git a/389-ds-base.spec b/389-ds-base.spec
index e26e2e4..9f8f2e2 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -15,7 +15,7 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.2.10.10
+Version:          1.2.10.11
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv2 with exceptions
 URL:              http://port389.org/
@@ -275,6 +275,11 @@ fi
 %{_libdir}/%{pkgname}/libslapd.so.*
 
 %changelog
+* Thu Jun 21 2012 Rich Megginson <rmeggins at redhat.com> - 1.2.10.11-1
+- Ticket #378 - audit log does not log unhashed password: enabled, by default.
+- Ticket #378 - unhashed#user#password visible after changing password
+- Ticket #365 - passwords in clear text in the audit log
+
 * Mon Jun 18 2012 Rich Megginson <rmeggins at redhat.com> - 1.2.10.10-1
 - Ticket #390 - [abrt] 389-ds-base-1.2.10.6-1.fc16: slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
 
diff --git a/sources b/sources
index 99be58c..eb54161 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-7145e5be6f5036fb0977d9d85ea262a3  389-ds-base-1.2.10.10.tar.bz2
+da1d9617afa0f2b5d815347ad960b84d  389-ds-base-1.2.10.11.tar.bz2


More information about the scm-commits mailing list