add CHANGES for r950249

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950250 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 7e565b985df258b2c5c52c0070eace0bcd73fa07..0096b4cc30b5aa61a703f140725302adf69455bb 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -28,6 +28,10 @@ Changes with Apache 2.3.7
      processing is completed, avoiding orphaned callback pointers.
      [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
 
+  *) mod_authnz_ldap: Ensure nested groups are checked when the 
+     top-level group doesn't have any direct non-group members
+     of attributes in AuthLDAPGroupAttribute. [Eric Covener]
+
   *) mod_authnz_ldap: Search or Comparison during authorization phase
      can use the credentials from the authentication phase
      (AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser).