adamwill / 389-ds-base

Forked from 389-ds-base 4 years ago
Clone

bb565bd Ticket #561 - disable writing unhashed#user#password to changelog

Authored and Committed by nhosoi 9 years ago
    Ticket #561 - disable writing unhashed#user#password to changelog
    
    Backported:
    . commit c4bd52e2211c043087765f74df6cf6cd41b8f234
      Ticket #561 - disable writing unhashed#user#password to changelog
    
    . commit da3be3fbf497775f608d1289f72cfe427850f950
      Fix optimization issue introduced with fix for ticket #561,
    
    . commit 1d4f3ca2e931e6d930056aeb683256965503c5e1
      Fixing a compiler warning introduced by Ticket #561
    
    . commit 84b8bfd7d18a0613920dce36f1d3775d75e45a3e
      Fix for CVE-2014-8112
    
    Description:
    Introducing a config parameter nsslapd-unhashed-pw-switch to cn=config.
    The parameter takes 3 values:
      on    - unhashed password is stored in the entry extension
              and logged in the changelog.
      nolog - unhashed password is stored in the entry extension
              but not logged in the changelog.
      off   - unhashed password is not stored in the entry extension.
    
    https://fedorahosted.org/389/ticket/561
    
        
file modified
+7 -6
file modified
+82 -2
file modified
+26 -21
file modified
+14 -21
file modified
+4 -4
file modified
+8 -3