aboutsummaryrefslogtreecommitdiffstats
path: root/Bugzilla/Auth
Commit message (Collapse)AuthorAgeFilesLines
* Bug 604522: t/012throwables.t doesn't catch new user errors correctlyFrédéric Buclin2010-10-151-2/+2
| | | | r/a=mkanat
* Bug 575947: Users with passwords length less than 6 characters can't login ↵Frédéric Buclin2010-10-141-0/+6
| | | | | | after migration from 3.4.x or older to 3.6 or newer r/a=mkanat
* Bug 602165: Change sql_interval to sql_date_math, in preparation forMax Kanat-Alexander2010-10-071-2/+3
| | | | MS-SQL and SQLite support.
* Bug 550732: Allow read-only JSON-RPC methods to be called with GETMax Kanat-Alexander2010-04-224-0/+16
| | | | r=dkl, a=mkanat
* Bug 553770: Make the JSON-RPC WebService throw a proper error when you don'tMax Kanat-Alexander2010-03-231-4/+2
| | | | | | provide login credentials on a LOGIN_REQUIRED page. (Before this, it was attempting to display the HTML login page to JSON-RPC clients.) r=dkl, a=mkanat
* Fix the data in the bzr repo to match the data in the CVS repo.Max Kanat-Alexander2010-02-011-0/+0
| | | | | | | During the CVS imports into Bzr, there were some inconsistencies introduced (mostly that files that were deleted in CVS weren't being deleted in Bzr). So this checkin makes the bzr repo actually consistent with the CVS repo, including fixing permissions of files.
* Bug 467992: Login fails if the user's LDAP account is denied search in LDAP ↵lpsolit%gmail.com2010-01-051-5/+28
| | | | - Patch by Adam Batkin <adam@batkin.net> r/a=mkanat
* Bug 527586: Use X-Forwarded-For instead of REMOTE_ADDR for trusted proxiesmkanat%bugzilla.org2009-12-312-2/+2
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 385606: Logincookies are recreated at each HTTP request when using the ↵lpsolit%gmail.com2009-12-311-0/+1
| | | | 'Env' auth method - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
* Bug 355283: Lock out a user account on a particular IP for 30 minutes if ↵mkanat%bugzilla.org2009-12-131-16/+30
| | | | | | they fail to log in 5 times from that IP. Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 430014: Re-write the code hooks system so that it uses modules instead ↵mkanat%bugzilla.org2009-11-242-2/+2
| | | | | | of individual .pl files Patch by Max Kanat-Alexander <mkanat@bugzilla.org> (module owner) a=mkanat
* Bug 525734: Allow WebService clients to authenticate using Bugzilla_login ↵mkanat%bugzilla.org2009-11-092-8/+7
| | | | | | and Bugzilla_password Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 399073: Remove the 'loginnetmask' parameter - Patch by Frédéric ↵lpsolit%gmail.com2009-10-182-26/+14
| | | | Buclin <LpSolit@gmail.com> r/a=mkanat
* Bug 514913: Eliminate ssl="authenticated sessions"mkanat%bugzilla.org2009-10-092-16/+3
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 488467: Verify and Login auth methods were being called in a random ↵mkanat%bugzilla.org2009-04-172-2/+2
| | | | | | order, causing sudo sessions to frequently not need the user to re-enter their password. Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 121601: Have logout display index.cgi, not just a message on relogin.cgi.mkanat%bugzilla.org2009-03-011-0/+1
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 134022: PERFORMANCE: deleting old login cookies locks login checksmkanat%bugzilla.org2009-01-201-0/+9
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat
* Bug 211006: Make Bugzilla use SHA-256 instead of crypt() to store hashed ↵mkanat%bugzilla.org2009-01-021-0/+10
| | | | | | passwords in the database Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 455584 - Use bz_crypt everywhere instead of the crypt() functiondkl%redhat.com2008-10-231-6/+1
| | | | Patch by David Lawrence <dkl@redhat.com> = r/a=LpSolit
* Bug 460770: Incorrect regexp when parsing the list of LDAP servers - Patch ↵lpsolit%gmail.com2008-10-201-1/+1
| | | | by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
* Partial backout of bug 183665. It's responsible for bug 457719lpsolit%gmail.com2008-10-051-1/+1
|
* Bug 453767 - Passwords containing wide characters causes system errordkl%redhat.com2008-09-121-0/+5
| | | | Patch by David Lawrence <dkl@redhat.com> - a/r=mkanat
* Bug 449984: Login cookies should be created as SSL-only on installations ↵lpsolit%gmail.com2008-08-271-15/+18
| | | | that require SSL - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
* Bug 368502 - "Bugzilla_logincookie should not be accessible via javascript" ↵reed%reedloden.com2008-08-231-3/+6
| | | | [p=reed r+a=mkanat]
* Bug 428659 – Setting SSL param to 'authenticated sessions' only ↵dkl%redhat.com2008-08-181-3/+8
| | | | | | | protects logins and param doesn't protect WebService calls at all Patch by David Lawrence <dkl@redhat.com> - r/a=LpSolit/mkanat
* Bug 438435: Need code hooks for authenticationmkanat%bugzilla.org2008-08-072-8/+24
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat
* Backing out these patches as they cause a regression. More informationdkl%redhat.com2008-07-291-3/+5
| | | | | | | | | | | in the respective bug reports. Bug 428659 – Setting SSL param to 'authenticated sessions' only protects logins and param doesn't protect WebService calls at all Patch by Dave Lawrence <dkl@redhat.com> - r/a=mkanat Bug 445104: ssl redirects come with a 200 OK HTTP code on mod_perl Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 428659 – Setting SSL param to 'authenticated sessions' only ↵dkl%redhat.com2008-07-101-5/+3
| | | | | | protects logins and param doesn't protect WebService calls at all Patch by Dave Lawrence <dkl@redhat.com> - r/a=mkanat
* Bug 408384: Set extern_id when using LDAP authmkanat%bugzilla.org2007-12-151-0/+2
| | | | Patch By Emmanuel Seyman <eseyman@linagora.com> r=mkanat, a=mkanat
* Bug 229049: Make LDAP authentication work when there are multiple mail= ↵mkanat%bugzilla.org2007-12-141-1/+17
| | | | | | attributes for an account. Patch By Emmanuel Seyman <eseyman@linagora.com> r=mkanat, a=mkanat
* Bug 183665: Accessing post_bug.cgi directly gives a weird error message and ↵lpsolit%gmail.com2007-11-151-1/+1
| | | | should redirect to enter_bug.cgi instead - Patch by Matt Tasker <mtasker@gmail.com> (based on the original patch from victory <spam@bmo2007.rsz.jp>) r/a=LpSolit
* Bug 380187 – Bugzilla should support RADIUS authentication.wurblzap%gmail.com2007-08-031-0/+64
| | | | | Patch by Marc Schumann <wurblzap@gmail.com>; r=mkanat, a=mkanat
* Bug 380928 – Bugzilla::Auth::Verify::create_or_update_user can return ↵ghendricks%novell.com2007-05-231-4/+3
| | | | | | stale Bugzilla::User object patch by vrb@novell.com r=mkanat a=mkanat
* Bug 367480: [LDAP] Try a list of servers in order until we connect successfullymkanat%bugzilla.org2007-03-081-4/+9
| | | | Patch By Tony Bajan <firefox@tonyb.me.uk> r=mkanat, a=mkanat
* Bug 340538: Insecure dependency in exec while running with -T switch at ↵wurblzap%gmail.com2006-10-211-3/+5
| | | | | | | /usr/lib/perl5/site_perl/5.8.6/Mail/Mailer/sendmail.pm line 16. Patch by Marc Schumann <wurblzap@gmail.com>, r=LpSolit, a=myk
* Bug 349349: Use ->create from Bugzilla::Object instead of insert_new_user ↵mkanat%bugzilla.org2006-08-261-2/+7
| | | | | | for Bugzilla::User Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 224577: Bugzilla could use a web services interface.wurblzap%gmail.com2006-08-201-0/+7
| | | | | Patch by Marc Schumann <wurblzap@gmail.com>; r=mkanat; a=myk
* Bug 346245: attribute parameter 'johndoe@company.tld' is not a hash ref at ↵mkanat%bugzilla.org2006-07-291-2/+2
| | | | | | Bugzilla/Auth/Verify.pm line 112 Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=wurblzap, a=myk
* Bug 339731: [LDAP] URI-parsing code duplicated with Net::LDAP - Patch by ↵lpsolit%gmail.com2006-07-111-28/+2
| | | | guillomovitch@zarb.org r=mkanat a=justdave
* Bug 340967: The login form appears twice when trying to add an attachment ↵lpsolit%gmail.com2006-07-061-0/+15
| | | | (due to two consecutive calls to Bugzilla->login) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 338375: Use Bugzilla->params everywhere instead of Param().mkanat%bugzilla.org2006-07-044-4/+0
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 342869: Use Bugzilla->params everywhere except templatesmkanat%bugzilla.org2006-07-044-16/+20
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Spelling in code comments patch: 'cokie' -> 'cookie'; patch by Vlad Dascalu ↵vladd%bugzilla.org2006-06-191-1/+1
| | | | <vladd@bugzilla.org>.
* Bug 340104: Move Bugzilla::Auth::get_netaddr() in Util.pm - Patch by ↵lpsolit%gmail.com2006-06-032-5/+2
| | | | Frédéric Buclin <LpSolit@gmail.com> r/a=justdave
* Bug 282687: LDAP: TLS Support - Patch by guillomovitch@zarb.org r=mkanat ↵lpsolit%gmail.com2006-06-021-0/+8
| | | | a=justdave
* Bug 339858: Remove useless module dependencies in Bugzilla::Auth::* - Patch ↵lpsolit%gmail.com2006-06-014-4/+3
| | | | by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave
* Bug 338573: Auth could throw an insecure dependency error if username is taintedmkanat%bugzilla.org2006-05-311-0/+6
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 320751: LDAP: Ability to have Bugzilla use the LDAP username directly as ↵mkanat%bugzilla.org2006-05-311-5/+10
| | | | | | the Bugzilla username Patch By guillomovitch@zarb.org r=mkanat, a=myk
* Bug 337661: LDAP user login failure: Can't locate object method "realname" ↵lpsolit%gmail.com2006-05-151-1/+1
| | | | via package "Bugzilla::User" - Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit a=justdave
* Bug 300410: Bugzilla::Auth needs to be restructured to not require a BEGIN blockmkanat%bugzilla.org2006-05-1215-1008/+1002
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
generated by cgit v1.2.1 (git 2.21.0) at 2024-11-23 00:52:54 +0000