evergreen:tags/rel_2_0_10

Last commit made on 2011-10-06
Get this branch:
git clone -b tags/rel_2_0_10 https://git.launchpad.net/evergreen

Branch merges

Branch information

Name:
tags/rel_2_0_10
Repository:
lp:evergreen

Recent commits

cc480a7... by Galen Charlton

fix authentication failure

Ensure that the auth_limit values are read when open-ils.auth
initializes, not during oilsAuthInit(). This solves a problem
observed on brick-based setups where authentication could
incorrectly fail because the drone that processes
open-ils.auth.authenticate.complete didn't have the the block
count value initialized yet.

Also fixed type nit when compare the fail count to the block
limit.

Signed-off-by: Galen Charlton <email address hidden>
Signed-off-by: Bill Erickson <email address hidden>

f70a761... by Mike Rylander

Change log and version bumps

Signed-off-by: Mike Rylander <email address hidden>

3618c59... by Mike Rylander

Upgrade script for 2.0.10

Signed-off-by: Mike Rylander <email address hidden>

1c85f6e... by Thomas Berezansky

Clear password from password_prompt post-login

Otherwise it remains as the plain text value.

Signed-off-by: Thomas Berezansky <email address hidden>
Signed-off-by: Jason Etheridge <email address hidden>

695ff9f... by Thomas Berezansky

Require password to change email/username

Alter backend to check password period, not just for password changes.
Add form elements for asking for current password to JSPac.
Add handling for said form elements where needed.

Signed-off-by: Thomas Berezansky <email address hidden>
Signed-off-by: Bill Erickson <email address hidden>

3db19f9... by Thomas Berezansky

When workstation is invalid request a new seed

The original one may no longer be valid

Signed-off-by: Thomas Berezansky <email address hidden>
Signed-off-by: Bill Erickson <email address hidden>

de72b1a... by Thomas Berezansky

Make more auth values configurable

Amount of time seed is valid
Amount of time to keep failure count in memcache since last auth event
Number of failures before locking out auth attempts

Also, remove seed from memcache once it has been used once.

Signed-off-by: Thomas Berezansky <email address hidden>
Signed-off-by: Bill Erickson <email address hidden>

37c3f22... by Thomas Berezansky

Brute Force protection for authentication

Count auth failures in memcache.
If 10+ have occurred cause failure.

After 90 seconds of no activity counter resets.

Signed-off-by: Thomas Berezansky <email address hidden>
Signed-off-by: Bill Erickson <email address hidden>

6b1cdad... by Lebbeous Fogle-Weekley <email address hidden>

link asset.copy_template.status to config.copy_status in the IDL

If nothing else, this provides a dropdown for status in the copy
template editor (the one for Serials, under the admin menus, not the
one on the copy editing interface).

Signed-off-by: Lebbeous Fogle-Weekley <email address hidden>
Signed-off-by: Dan Wells <email address hidden>

652671d... by Lebbeous Fogle-Weekley <email address hidden>

JSPAC: Fix a bug (I think) in orgIsMine(), and show more MFHD holdings ...

... when search scope would have it so.

Signed-off-by: Lebbeous Fogle-Weekley <email address hidden>
Signed-off-by: Dan Scott <email address hidden>