[jboss-cvs] Picketbox SVN: r377 - branches/embargo/4.0.14.Final-JBPAPP6-1704/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi.

[jboss-cvs-commits at lists.jboss.org]

Author: pskopek
Date: 2013-01-14 09:36:21 -0500 (Mon, 14 Jan 2013)
New Revision: 377

Modified:
   branches/embargo/4.0.14.Final-JBPAPP6-1704/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java
   branches/embargo/4.0.14.Final-JBPAPP6-1704/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapLoginModule.java
Log:
[JBPAPP6-1704] Changing default of allow empty passwords to false.

Modified: branches/embargo/4.0.14.Final-JBPAPP6-1704/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java
===================================================================
--- branches/embargo/4.0.14.Final-JBPAPP6-1704/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java	2013-01-11 09:55:31 UTC (rev 376)
+++ branches/embargo/4.0.14.Final-JBPAPP6-1704/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java	2013-01-14 14:36:21 UTC (rev 377)
@@ -290,7 +290,7 @@
          if (inputPassword.length() == 0)
          {
             // Check for an allowEmptyPasswords option
-            boolean allowEmptyPasswords = true;
+            boolean allowEmptyPasswords = false;
             String flag = (String) options.get(ALLOW_EMPTY_PASSWORDS);
             if (flag != null)
                allowEmptyPasswords = Boolean.valueOf(flag).booleanValue();

Modified: branches/embargo/4.0.14.Final-JBPAPP6-1704/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapLoginModule.java
===================================================================
--- branches/embargo/4.0.14.Final-JBPAPP6-1704/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapLoginModule.java	2013-01-11 09:55:31 UTC (rev 376)
+++ branches/embargo/4.0.14.Final-JBPAPP6-1704/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapLoginModule.java	2013-01-14 14:36:21 UTC (rev 377)
@@ -249,7 +249,7 @@
          if (inputPassword.length() == 0)
          {
             // Check for an allowEmptyPasswords option
-            boolean allowEmptyPasswords = true;
+            boolean allowEmptyPasswords = false;
             String flag = (String) options.get(ALLOW_EMPTY_PASSWORDS);
             if (flag != null)
                allowEmptyPasswords = Boolean.valueOf(flag).booleanValue();