From: Eric Covener <covener@apache.org>
Date: Tue, 1 Jun 2010 21:35:46 +0000 (+0000)
Subject: add CHANGES for r950249
X-Git-Tag: 2.3.6~77
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=c47fc4ecff67603d1830dbb3396ff2472add5ef5;p=apache

add CHANGES for r950249


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950250 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index 7e565b985d..0096b4cc30 100644
--- a/CHANGES
+++ b/CHANGES
@@ -28,6 +28,10 @@ Changes with Apache 2.3.7
      processing is completed, avoiding orphaned callback pointers.
      [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
 
+  *) mod_authnz_ldap: Ensure nested groups are checked when the 
+     top-level group doesn't have any direct non-group members
+     of attributes in AuthLDAPGroupAttribute. [Eric Covener]
+
   *) mod_authnz_ldap: Search or Comparison during authorization phase
      can use the credentials from the authentication phase
      (AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser).