Scarab commit: svn commit: r10558 - trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityService.java

Author: hair
Date: 2008-05-05 09:47:30-0700
New Revision: 10558

Modified:
   trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityService.java

Log:
LDAP authentication was pushing the user's ldap password into TURBINE_USER in clear-text (and it was being pushed everytime the user logged in)

Modified: trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityService.java
Url: http://scarab.tigris.org/source/browse/scarab/trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityService.java?view=diff&rev=10558&p1=trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityService.java&p2=trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityService.java&r1=10557&r2=10558
==============================================================================
--- trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityService.java	(original)
+++ trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityService.java	2008-05-05 09:47:30-0700
@@ -173,7 +173,7 @@
                 String encrypted = TurbineSecurity.encryptPassword(password);
 
                 if (!encrypted.equals(curruser.getPassword())) {
-                    curruser.setPassword(password);
+                    curruser.setPassword(encrypted);
                 }
 
                 userManager.store(curruser);