ric...@nakts.net
unread,Jan 31, 2014, 3:13:11 AM1/31/14Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to zabbix_tr...@googlegroups.com
Zabbix English locale changed between revision 42006 and 42018
****************** svn log for these revisions (locale file only)
------------------------------------------------------------------------
r42010 | pavels | 2014-01-31 09:40:38 +0200 (Fri, 31 Jan 2014) | 7 lines
A......... [ZBX-7703] fixed being able to switch users without proper credentials when using HTTP authentication
Before the fix:
- When Zabbix was configured to use HTTP authentication, an API user could login with his HTTP authentication credentials and then use the user.authenticate method to login as a different user without specifying a password.
After the fix:
- The user.authenticate method will now check if the user name passed to the method is the same as the name used for HTTP authentication. That way an API user will only be able to login as a user for which he has HTTP authentication credentials. The method will now also throw an error if HTTP authentication is selected in Zabbix, but not configured on the web server.
------------------------------------------------------------------------
****************** svn diff for these revisions (locale file only)
Index: branches/1.8/frontends/php/include/locales/en_gb.inc.php
===================================================================
--- branches/1.8/frontends/php/include/locales/en_gb.inc.php (revision 42006)
+++ branches/1.8/frontends/php/include/locales/en_gb.inc.php (revision 42018)
@@ -2342,6 +2342,8 @@
'S_CUSER_ERROR_ACCOUNT_IS_BLOCKED_FOR_XX_SECONDS_FIRST_PART'=> 'Account is blocked for',
'S_CUSER_ERROR_ACCOUNT_IS_BLOCKED_FOR_XX_SECONDS_SECOND_PART'=> 'seconds',
'S_CUSER_ERROR_LOGIN_OR_PASSWORD_INCORRECT'=> 'Login name or password is incorrect',
+ 'S_CUSER_ERROR_CANNOT_LOGIN' => 'Cannot login',
+ 'S_CUSER_ERROR_USER_DOES_NOT_MATCH_HTTP_LOGIN'=> 'Login name does not match the name used to pass HTTP authentication',
'S_CUSER_ERROR_SESSION_TERMINATED'=> 'Session terminated, please re-login!',
'S_CUSER_ERROR_TABLE_USERS_EMPTY'=> 'Table users is empty. Possible database corruption.',
'S_CUSER_ERROR_LDAP_MODULE_MISSING'=> 'Probably php-ldap module is missing',