From c47fc4ecff67603d1830dbb3396ff2472add5ef5 Mon Sep 17 00:00:00 2001
From: Eric Covener <covener@apache.org>
Date: Tue, 1 Jun 2010 21:35:46 +0000
Subject: [PATCH] add CHANGES for r950249

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950250 13f79535-47bb-0310-9956-ffa450edef68
---
 CHANGES | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGES b/CHANGES
index 7e565b985d..0096b4cc30 100644
--- a/CHANGES
+++ b/CHANGES
@@ -28,6 +28,10 @@ Changes with Apache 2.3.7
      processing is completed, avoiding orphaned callback pointers.
      [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
 
+  *) mod_authnz_ldap: Ensure nested groups are checked when the 
+     top-level group doesn't have any direct non-group members
+     of attributes in AuthLDAPGroupAttribute. [Eric Covener]
+
   *) mod_authnz_ldap: Search or Comparison during authorization phase
      can use the credentials from the authentication phase
      (AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser).
-- 
2.50.1