Mercurial > p > roundup > code
diff CHANGES.txt @ 4484:52e13bf0bb40
Add new config-option 'migrate_passwords' in section 'web'...
...to auto-migrate passwords at web-login time. Default for the new
option is "yes" so if you don't want that passwords are auto-migrated
to a more secure password scheme on user login, set this to "no"
before running your tracker(s) after the upgrade.
| author | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
|---|---|
| date | Thu, 14 Apr 2011 18:10:58 +0000 |
| parents | 22bc0426e348 |
| children | 693c75d56ebe |
line wrap: on
line diff
--- a/CHANGES.txt Thu Apr 14 15:42:41 2011 +0000 +++ b/CHANGES.txt Thu Apr 14 18:10:58 2011 +0000 @@ -79,6 +79,11 @@ - Fix Password handling security issue2550688 (thanks Joseph Myers for reporting and Eli Collins for fixing) -- this fixes all observations by Joseph Myers except for auto-migration of existing passwords. +- Add new config-option 'migrate_passwords' in section 'web' to + auto-migrate passwords at web-login time. Default for the new option + is "yes" so if you don't want that passwords are auto-migrated to a + more secure password scheme on user login, set this to "no" before + running your tracker(s) after the upgrade. 2010-10-08 1.4.16 (r4541)