Package: webcalendar
Version: 1.0.5-15
Severity: important

  webcalendar appears to have some sort of length restriction on
passwords.  This is obnoxious, but lots of Web sites seem to do it these
days.  What makes this particularly nasty, though, is that the
restriction is only enforced at login time.  In other words, I can set a
long password such as "alwksefjkwlaefhwkalerjfhkewlrfj" just fine, but
when I try to log in, the password is not recognized.  My first
encounter with this involved the "admin" account, at which point I just
purged the package and started over (easier than figuring out how to
reset the password by hand...)

  If this restriction is deliberate, you should verify before you set
the password that the user will still be able to log in!  Most of the
aforementioned Web sites do this by displaying a little note like
"the password is invalid: it must be between 6 and 12 characters,
contain no special characters, and must not contain the word 'Belgium'".

  Daniel

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages webcalendar depends on:
ii  apache2                       2.2.9-5    Apache HTTP Server metapackage
ii  apache2-mpm-prefork [apache2] 2.2.9-5    Apache HTTP Server - traditional n
ii  dbconfig-common               1.8.39     common framework for packaging dat
ii  debconf [debconf-2.0]         1.5.22     Debian configuration management sy
ii  libapache2-mod-php5           5.2.6-2    server-side, HTML-embedded scripti
ii  php5-cli                      5.2.6-2    command-line interpreter for the p
ii  php5-mysql                    5.2.6-2    MySQL module for php5
ii  ucf                           3.007      Update Configuration File: preserv

Versions of packages webcalendar recommends:
ii  mysql-client            5.0.51a-9+lenny2 MySQL database client (meta packag
ii  mysql-client-5.0 [mysql 5.0.51a-9+lenny2 MySQL database client binaries
ii  mysql-server            5.0.51a-9+lenny2 MySQL database server (meta packag
ii  mysql-server-5.0 [mysql 5.0.51a-9+lenny2 MySQL database server binaries

-- debconf information:
  webcalendar/pgsql/manualconf:
  webcalendar/dbconfig-remove:
  webcalendar/mysql/method: unix socket
  webcalendar/dbconfig-reinstall: false
  webcalendar/conf/httpd_conf: apache2
  webcalendar/store/webservers_to_be_restarted:
  webcalendar/remote/host:
* webcalendar/note/admin_user:
  webcalendar/purge: false
  webcalendar/internal/reconfiguring: false
  webcalendar/conf/db_persistent: false
  webcalendar/pgsql/authmethod-admin: ident
  webcalendar/pgsql/admin-user: postgres
  webcalendar/db/dbname: webcalendar
  webcalendar/conf/single_user_login:
* webcalendar/conf/restart_webserver: false
  webcalendar/remote/newhost:
  webcalendar/internal/skip-preseed: false
  webcalendar/conf/single_user_mode: false
  webcalendar/upgrade-backup: true
  webcalendar/db/app-user: webcalendar
  webcalendar/mysql/admin-user: root
  webcalendar/passwords-do-not-match:
  webcalendar/upgrade-error: abort
  webcalendar/install-error: abort
  webcalendar/pgsql/authmethod-user:
  webcalendar/remote/port:
  webcalendar/pgsql/changeconf: false
* webcalendar/database-type: mysql
  webcalendar/pgsql/no-empty-passwords:
  webcalendar/remove-error: abort
  webcalendar/missing-db-package-error: abort
  webcalendar/pgsql/method: unix socket
  webcalendar/db/basepath:
  webcalendar/dbconfig-upgrade: true
* webcalendar/dbconfig-install: true
  webcalendar/conf/use_http_auth: false
* webcalendar/status/debconf_managed: true



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to