summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRuediger Pluem <rpluem@apache.org>2021-01-27 09:20:37 +0100
committerRuediger Pluem <rpluem@apache.org>2021-01-27 09:20:37 +0100
commite408c5f1af83148c9a7166ab4abfe560674878b1 (patch)
tree37db94406c84117a2bd2269820a6deb29764894b
parentBefore doing any bind check that the provided username is not NULL and that the (diff)
downloadapache2-e408c5f1af83148c9a7166ab4abfe560674878b1.tar.xz
apache2-e408c5f1af83148c9a7166ab4abfe560674878b1.zip
* Document r1885939 and r1885940
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1885941 13f79535-47bb-0310-9956-ffa450edef68
-rw-r--r--changes-entries/no_empty_bind_password.txt2
1 files changed, 2 insertions, 0 deletions
diff --git a/changes-entries/no_empty_bind_password.txt b/changes-entries/no_empty_bind_password.txt
new file mode 100644
index 0000000000..4e5b144207
--- /dev/null
+++ b/changes-entries/no_empty_bind_password.txt
@@ -0,0 +1,2 @@
+ *) mod_authnz_ldap: Prevent authentications with empty passwords for the
+ initial bind to fail with status 500. [Ruediger Pluem]