Anonymous Login

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0000065SKGB-internaccountpublic2014-07-20 20:51
Reporteraj 
Assigned Toaj 
PriorityhighSeverityminorReproducibilityhave not tried
StatusresolvedResolutionduplicate 
ProjectionnoneETAnone 
PlatformWWWOSiCabOS Version3.0b
Product Version1.1Product Build0.17.1 
Target Version1.1.8Fixed in Version1.1.7 
Summary0000065: New users are created with incorrect Digest realm
DescriptionA newly created user was created in the htdigest file with an incorrect Digest realm (the group ID instead of the realm string).

In particular, the user's line in htdigest looked like *****:skgb:* when it should have been *****:SKGB-intern:*
Additional InformationCould this also be a problem on password changes? That's be serious. Need to investigate!
TagsNo tags attached.
Attached Files

-Relationships
duplicate of 0000097resolvedaj Gruppenname nicht als Realm in htdigest verwenden 
+Relationships

-Notes

~0000033

aj (manager)

Probably isn't a major issue for SKGB-intern since neues-kennwort creates a new htdigest entry automatically when the ticket is claimed. For SKGB-intern, the only impact of this issue is SPAM in htdigest that doesn't contain the actual digest.

Security considerations: None.

~0000039

aj (manager)

Unable to reproduce. Needs more testing.
+Notes