• Back to all releases

Version 0.5 of mod_auth_bsd

• 
• 0.8.2

• 
•  11 Jan 2006 19:20
• 

• Minor feature enhancements

Release Notes: This release supports Require group and Require user access directives, even from chroot, using system user databases. An AuthBSDStrictRequire switch was added to force all Require directives to match instead of only one, which is the default behavior for Apache auth modules.

• 
• 0.8.1

• 
•  10 Jan 2006 22:49
• 

• Major feature enhancements

Release Notes: This release supports authentication from a chroot jail. Credential caching was provided along with failure throttling to thwart dictionary attacks.

• 
• 0.7

• 
•  20 Jun 2005 22:11
• 

• Code cleanup

No changes have been submitted for this release.

• 
• 0.6

• 
•  16 Sep 2003 23:52
• 

• Minor security fixes

Release Notes: This version removes the failure database because of signal issues allowing database corruption (truncated writes). The only practical fix was subject to a race, so this "feature" was removed entirely, and replaced with a simple, required nanosleep to mitigate brute-force attack.

• 
• 0.5

• 
•  28 Jul 2003 20:01
• 

• Major feature enhancements

Release Notes: Stricter/safer enforcement of login failure penalties, installation fixups, and a new AuthBSDRequireSSL directive (defaults to On).