RE: Scarab commit: svn commit: r10558 - trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityService.java

Guys - I've been trying to remove myself from this list for a while - how do
I do it?

Matthew Easlea | COSOL  | SAP & Ellipse Solution Architect 
Suite 4, 63 Melbourne St  | Brisbane QLD 4101 
m +61 (0) 402 472 539 f +61 3844 8818
join my network: http://www.linkedin.com/in/mjeaslea
e mailto:[email protected] | www.cosol.com.au

Streamlining business processes for resource companies

-----Original Message-----
From: [email protected] [mailto:[email protected]] 
Sent: Tuesday, May 06, 2008 2:48 AM
To: [email protected]
Subject: Scarab commit: svn commit: r10558 -
trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityServi
ce.java

Author: hair
Date: 2008-05-05 09:47:30-0700
New Revision: 10558

Modified:
 
trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityServi
ce.java

Log:
LDAP authentication was pushing the user's ldap password into TURBINE_USER
in clear-text (and it was being pushed everytime the user logged in)

Modified:
trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityServi
ce.java
Url:
http://scarab.tigris.org/source/browse/scarab/trunk/src/java/org/tigris/scar
ab/services/security/ScarabLDAPDBSecurityService.java?view=diff&rev=10558&p1
=trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityServ
ice.java&p2=trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBS
ecurityService.java&r1=10557&r2=10558
============================================================================
==
---
trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityServi
ce.java	(original)
+++
trunk/src/java/org/tigris/scarab/services/security/ScarabLDAPDBSecurityServi
ce.java	2008-05-05 09:47:30-0700
@@ -173,7 +173,7 @@
                 String encrypted =
TurbineSecurity.encryptPassword(password);
 
                 if (!encrypted.equals(curruser.getPassword())) {
-                    curruser.setPassword(password);
+                    curruser.setPassword(encrypted);
                 }
 
                 userManager.store(curruser);