File: CHANGES

package info (click to toggle)
php-horde-passwd 5.0.2-3%2Bdeb8u1
  • links: PTS, VCS
  • area: main
  • in suites: jessie
  • size: 3,324 kB
  • ctags: 301
  • sloc: php: 2,014; xml: 1,054; makefile: 10; sh: 3
file content (329 lines) | stat: -rw-r--r-- 11,245 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
------
v5.0.2
------

[jan] Fix syntax error in HTTP driver (Bug #13464).
[mms] Re-add 'userdn' hook.
[jan] Update Danish translation (Erling Preben Hansen <erling@eph.dk>).
[mms] Fix usage of 'query_lookup' and 'query_modify' backend parameters
      (Michael Cramer <michael@bigmichi1.de>).


------
v5.0.1
------

[jan] Don't overwrite parameters for composite sub-drivers (Bug #12284).
[jan] Don't install expect scripts as executables.
[jan] Fix fatal error in Samba/LDAP driver (Bug #12319).
[jan] Fix user name parameter in LDAP driver (Bug #12331).


------
v5.0.0
------

[jan] Add policy for minimum number of non-alphanumeric characters (Friedrich
      Haubensak <hsk@fli-leibniz.de>, Request #12243).
[jan] Add parameter for sudo program name to expect script (Friedrich Haubensak
      <hsk@fli-leibniz.de>, Request #12243).


-----------
v5.0.0beta1
-----------

[mms] Add option to destroy Horde session after changing password (Bug #11766).
[mms] Http driver now uses Horde_Http_Client.
[jan] Update French translation (Paul De Vlieger
      <paul.de_vlieger@moniut.univ-bpclermont.fr>).
[jan] Update Polish translation (Krzysztof Kozera <krzysztof113@o2.pl>).
[jan] Update Italian translation (Massimo Malabotta <mmalabotta@units.it>).
[jan] Fix preparing multiple backends (Bug #11023).


------
v4.0.1
------

[rla] Don't pass too many parameters from backends.php to Horde_Db (Bug
      #10963).
[jan] Make expect driver locale independent (Bug #9166).
[jan] Update Japanese translation (Hiromi Kimura <hiromi@tac.tsukuba.ac.jp>).


----
v4.0
----

[bak] Fix lookup of user entry in LDAP driver.


-----------
v4.0-ALPHA1
-----------

[jan] Add Latvian translation (Jānis Eisaks <jancs@dv.lv>).
[rla] Add new driver 'horde' which uses the update() function of horde's
      authentication driver.
[jan] Provide default configuration files instead of .dist versions.
[jan] Fix creating temporary files with open_basedir restrictions.


------
v3.1.3
------

[jan] Fix examples using 'minSymbols' instead of 'minSymbol' (Bug #8854).
[jan] Fix PHP error when changing passwords with LDAP driver (Bug #8686).


------
v3.1.2
------

[jan] Enable output compression (horde@albasoft.com, Bug #8649).
[jan] Add Croatian translation (Valentin Vidic <valentin.vidic@carnet.hr>).
[jan] Add option to configure referrals for LDAP driver (manilal@ejyothi.com,
      Request #8582).
[jan] Simplify and fix smbldap driver (Bug #8192).


------
v3.1.1
------

[cjh] SECURITY: Fix XSS when specifying an invalid backend key
      (security@davidwharton.us, #8398).
[jan] Add hook that's called after successfully changing the password.
[jan] Add SOAP driver.
[jan] Add example configuration for Postfix Admin (Michael Brennen
      <michael@fishnet.us>).
[jan] Fix binding to LDAP server if using the userdn hook.


----
v3.1
----

[cjh] Fix bad mode for STDERR in the procopen driver
      (info@opensolutions.net, Bug #8022).


--------
v3.1-RC2
--------

[cjh] Don't include the old password in LDAP driver error messages
      (Joffrey van Wageningen <joffrey-horde@coolhaven.info>).


--------
v3.1-RC1
--------

[cjh] Add missing enforcement of minSymbol password policy
      (yann@pleiades.fr.eu.org, Bug #7260).
[cjh] Only update smbldap attributes for Samba users, and update all attributes
      at once instead of one at a time (marco@csita.unige.it, Request #5977).
[cjh] Don't set smbldap attributes that are commented out in the config
      (fabio.pedretti@ing.unibs.it, Request #5937).
[jan] Move all Passwd-specific hook examples from Horde's config/ directory.
[cjh] Add support for switching between encryption schemes
      (ulrich-horde@topfen.net, Request #2865).
[jan] Add support for sudo to the example expect script (Dennis Voetelink
      <voetelink@ecn.nl>, Request #5300).
[mas] Conform to WCAG 1.0 Priority 2/Section 508 accessibility guidelines.
      (Request #4080)
[jan] Add new expect driver that uses the expect PECL PHP extension (Duck
      <duck@obala.net>).
[mjr] Add new http driver for changing passwords via an existing web form.
[mjr] Pass reference to driver to the _passwd_hook_username call. 
[jan] Add Turkish translation (METU <horde-tr@metu.edu.tr>).


------
v3.0.1
------

[jan] Add placeholders for domain and username parts to SQL driver queries
      (Vilius Sumskas <vilius@lnk.lt>, Request #4985).
[jan] Improve error checking in poppassd driver (Bug #4505,
      horde@koornneef.net).
[jan] Add Slovenian translation (Duck <duck@obala.net>).
[jan] Compare hashing algorithms in passwords case insensitively
      (andreas@altroot.de, Bug #2708).
[jan] Allow password changing for special Kolab users (mzizka@hotmail.com,
      Request #4128).
[jan] Add Japanese translation (Hiromi Kimura <hiromi@tac.tsukuba.ac.jp>).
[ben] Better support for MS-SQL
[cjh] Add support in the expect driver for rssh, scponly, and other programs
      that can execute certain commands over ssh without providing a prompt
      (Request #2887).


----
v3.0
----

[jan] Add configuration option to switch between using user names with and
      without realms.
[jan] Add Slovak translation (Ivan Noris <vix@vazka.sk>).


--------
v3.0-RC1
--------

[jan] Extend the expect script to allow setups with passwd as the login shell
      (Request #2550, Lionel Elie Mamane <lmamane@debian.org>).
[jan] Don't bind to LDAP anonymously if binding with userdn fails (Bug #2502).
[cjh] Fix updating shadowlastchange attribute in ldap driver (Roel Gloudemans
      <roel@gloudemans.info>).
[jan] Extend the smbldap driver from the ldap driver to support all parameters
      of the ldap driver (Request #2499).


---------
v3.0-BETA
---------

[cjh] Use Crypt_CHAP to generate smbldap passwords (Bug #1223).
[stb] Add Kolab driver.
[cjh] Allow using admin credentials in the LDAP driver (Bug #1409).
[cjh] Use bind variables in SQL drivers (selsky@columbia.edu, Bug #1718).
[cjh] Allow the list of refused usernames to be empty (Bug #1544).
[cjh] If $conf['user']['change'] is false, don't trust form input for
      the userid.
[jan] Add Catalan translation (Joan Jorba Calsina <joan.jorba@rusc.net>).
[cjh] Add ADSI and PSPASSWD windows password drivers (LRM
      <lrm@ionline.com.br>).
[jan] Add Persian (Western) translation (Vahid Ghafarpour
      <vahid@ghafarpour.com>).
[jan] Add shadowLastChange and shadowMin configuration items to LDAP driver
      (Roel Gloudemans <roel@gloudemans.info>).
[cjh] Add proc_open() driver (Samuel Nicolary <sam@nicolary.org>).
[cjh] Add an SMB LDAP driver (Shane Boulter <sboulter@ariasolutions.com>).
[cjh] Add SSL support to the LDAP driver (LRM <lrm@ionline.com.br>).
[max] Add minSymbols and minClasses password policies.  See comments in
      config/backends.php.dist for more information.
[max] Add optional 'required' parameters to composite driver's subdriver
      configurations.
[max] Add optional parameter 'no_reset' to the backend configs which prevents
      reseting the authenticated user's credentials on password changes.
[max] Properly reset authenticated user's credentials.
[cjh] Use password encryption that's now implemented in the Auth:: package.
[max] Add pine driver which changes a pine-encoded file using FTP.
[max] Fix password checking when encryption requires a random salt.
[max] Add composite driver which will replace all the groups stuff.
[max] Add support for backend groups to allow syncing of multiple backends.
[max] Add query_lookup and query_modify parameters to the sql driver.
[ejr] Add tls support for ldap driver.
[ejr] Fix error reporting in poppassd driver.
[ejr] Add binddn hook submitted by Amith Varghese <amith@xalan.com>.
[ejr] make sure oldpassword == horde_login_password before changing horde
      cached password.
[ejr] Fix md5 (md5-hex and md5-base64) encryption for ldap/sql (Amith Varghese
      <amith@xalan.com>).
[mc]  Move templates to horde style directory layout, getName() -> getParam().
[ejr] Implemented new CVS HEAD themes.
[ejr] Updated to new CVS HEAD notification system.


------
v2.2.2
------

[jan] Close XSS when setting the parent frame's page title by javascript (cjh).
[ejr] Configuration item for showing/changing username in the form.
[jan] Allow to set the protocol version in the LDAP driver (ben@alkaloid.net).
[cjh] Add crypt-blowfish and crypt-md5 encryption types. Also add crypt-des
      for completion which is just an alias for crypt (max).
[jan] Add Estonian translation (Toomas Aas <toomas.aas@raad.tartu.ee>).


------
v2.2.1
------
[jan] Bug #40: Fix smbpasswd driver with non-bash shells (Christopher Huyler
      <chris@huyler.net>).
[jan] Add Simplified Chinese translation (Zhang Bo <boozhang@sdb.ac.cn>).


----------
v2.2.1-RC1
----------
[jan] Add Indonesian language (Slamin <slamin@unej.ac.id>).
[jan] Add Galician translation (Rafael Varela Pet <srrafa@usc.es>, Guillermo
      Mendez <guille@usc.es>).
[jan] Add Danish translation (Anders Bruun Olsen <anders@bruun-olsen.net>).
[jan] Add Arabic (Syria) translation (Platinum Development Team
      <devteam@platinum-sy.net>).
[jan] Add Hungarian translation (Szabo Gyula <gyufi@sztaki.hu>).
[jan] Add Romanian translation (Eugen Hoanca <eugenh@urban-grafx.ro>,
      Marius Dragulescu <mariusd@urban-grafx.ro>).
[jan] Add Lithuanian translation (Vilius Sumskas <vilius@lnk.lt>).
[ejr] Fix BC breaks in vpopmail and sql drivers.


----
v2.2
----

[ejr] Allow bc for php versions that don't have the ctype extension.


--------
v2.2-RC2
--------

[ejr] Fix missing path for expect binary.
[ejr] Add missing scripts/ directory and missing expect script.
[ejr] Fix error reporting in expect driver (j.huinink@wanadoo.nl).
[ejr] Remove old realm code that was previously missed.
[ejr] Port servuftp driver to new backends.conf format.
[ejr] Return actual error message text in poppassd driver (submitted by
      Leena Heino <Leena.Heino@uta.fi>).
[ejr] Change is_a(*, 'PEAR_Error') calls to PEAR::isError() calls for php bc.


--------
v2.2-RC1
--------

[ejr] Add vpopmail driver (Anton Nekhoroshikh <anton@valuehost.ru>).
[mac] Add vmailmgr driver (Marco Kaiser <bate@php.net>).
[ejr] Add expect script (Gaudenz Steinlin).
[ejr] Change ldap code to do self-password changes, add phpdoc.
[ejr] Update ldap driver (Tjeerd van der Zee).
[ejr] Reset Horde/IMP cached credentials when changing password.
[ejr] Add username hooks (mac).
[ejr] Rewrite driver system, add backends.conf system (mc).
[jan] Add Italian translation (Fichera Gianrico <gianrico.fichera@itesys.it>).
[cjh] Close several small XSS vulnerabilities (Mitja Kolsek
      <mitja.kolsek@acros.si>).


----
v2.1
----

[ejr] Add servuftp interface.
[ejr] Add exim sql backend.
[ejr] Add smbpasswd support.
[ejr] Move to driver driven system.
[mc]  Add javascript checks for form input.
[jan] Add Bulgarian translation (Miroslav Pendev <pendev@hotmail.com>).


----
v2.0
----

[ejr] Added optional checks for password lengths and strength testing.
[ejr] Remove check for prefs.php in notconfigured.inc.
[ejr] Change from short-tag <?= to long format <?php echo.
[ejr] Fix spacing and look of Submit button.
[ejr] Update contact info in docs/INSTALL for mailing list.
[ejr] Added Norwegian (nn_NO) translation.
[ejr] Added Swedish (sv_SE) translation.