Commit 9f29a35c authored by Daryl Herzmann's avatar Daryl Herzmann Committed by akrherz

change register.password to xmpp.auth.iqauth to match IQAuthHandler,

this enforces the admin console setting of disallowing password
changes JM-1532 and CVE-2009-1596


git-svn-id: http://svn.igniterealtime.org/svn/repos/openfire/trunk@11076 b35dd754-fafc-0310-a699-88a17e54d16e
parent 9730b4ed
......@@ -147,7 +147,7 @@ public class IQRegisterHandler extends IQHandler implements ServerFeaturesProvid
// See if in-band registration should be enabled (default is true).
registrationEnabled = JiveGlobals.getBooleanProperty("register.inband", true);
// See if users can change their passwords (default is true).
canChangePassword = JiveGlobals.getBooleanProperty("register.password", true);
canChangePassword = JiveGlobals.getBooleanProperty("xmpp.auth.iqauth", true);
}
public IQ handleIQ(IQ packet) throws PacketException, UnauthorizedException {
......@@ -446,7 +446,7 @@ public class IQRegisterHandler extends IQHandler implements ServerFeaturesProvid
public void setCanChangePassword(boolean allowed) {
canChangePassword = allowed;
JiveGlobals.setProperty("register.password", canChangePassword ? "true" : "false");
JiveGlobals.setProperty("xmpp.auth.iqauth", canChangePassword ? "true" : "false");
}
public IQHandlerInfo getInfo() {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment