Auth

Creating an authentication system.

This package is unmaintained.

Download latest release 1.6.4 (there might be newer Composer installable version)

License: PHP License

Description

The PEAR::Auth package provides methods for creating an authentication
system using PHP.

Currently it supports the following storage containers to read/write
the login data:

* All databases supported by the PEAR database layer
* All databases supported by the MDB database layer
* All databases supported by the MDB2 database layer
* Plaintext files
* LDAP servers
* POP3 servers
* IMAP servers
* vpopmail accounts (Using either PECL vpopmail or PEAR Net_Vpopmaild)
* RADIUS
* SAMBA password files
* SOAP (Using either PEAR SOAP package or PHP5 SOAP extension)
* PEAR website
* Kerberos V servers
* SAP servers

Documentation

Manual

Maintainers

Martin Jansen (MJ) — lead, inactive
Yavor Shahpasov (yavo) — lead, inactive
Adam Ashley (aashley) — lead, active
James E. Flemer (jflemer) — developer, inactive
Adam Harvey (aharvey) — developer, active

Dependencies

Required

PHP (>= 4.3.3)
PEAR Installer (>= 1.4.0b1)

Optional

Log (>= 1.9.10)
File_Passwd (>= 1.1.0)
Net_POP3 (>= 1.3.0)
DB (>= 1.6.0)
MDB
MDB2 (>= 2.0.0RC1)
Auth_RADIUS
Crypt_CHAP (>= 1.0.0)
File_SMBPasswd (>= 1.0.0)
HTTP_Client (>= 1.1.0)
SOAP (>= 0.9.0)
Net_Vpopmaild (>= 0.1.0)
vpopmail (pecl.php.net, >= 0.2)
kadm5 (pecl.php.net, >= 0.2.3)
imap (extension)
saprfc (extension)
soap (extension)

Releases

1.6.4 (stable, 2010-10-25)
Release notes

License: PHP License

Fix baseinstalldir
1.6.3 (stable, 2010-10-25)
Release notes

License: PHP License

Automatically built QA release
Bug #17691 PATCH: Using explode instead of split - doconnor
1.6.2 (stable, 2009-10-15)
Release notes

License: PHP License

* Fix Bug #13756: Variable name mispelling in SAP container
* Fix Bug #13757: AUTH_LOG_ERR used but not defined
* Fix Bug #14248: Typo and documentation fixes
* Fix Bug #16676: Notices in PEAR container (cweiske)
1.6.1 (stable, 2008-04-04)
Release notes

License: PHP License

* Actually included the new NetVPOPMaild container file.
*mutter*grumble*stupid package.xml*grumble*mutter*
* Fix Bug #13578: Parse errors in DB Containers
1.6.0 (stable, 2008-04-03)
Release notes

License: PHP License

* Fixed Bug #12112: Advanced Security Cookie has different settings to
session cookie.
* Implemented Request #13337: New vpopmail container utilising Net_Vpopmaild.
Patch supplied by Bill Shupp (shupp)
* Implemented Request #13418: Karma support for PEAR Container. Patch supplied
by Christian Weiske (cweiske).
* Added correct debug message for when no login has occured instead of session
storage not found.
* Implemented Request #12061: Auto Quote handle database schema changes. ie
schema.tableName -> "schema"."tableName"
* Implemented Request #12087: Ability to select which Advanced Security options
are used.
* Fixed Doc Bug #12156: Correction to doc page for Auth::setSessionName() by
Adam Harvey (aharvey)
1.5.4 (stable, 2007-07-02)
Release notes

License: PHP License

* Fixed Bug #11499: Redundant parameter in Auth_Container_SOAP5::_validateOptions()
definition. Thanks to Koles Mihaly for spotting this.
1.5.3 (stable, 2007-07-02)
Release notes

License: PHP License

* Fixed Bug: If Auth::setSessionName() is called new session name variable is
not initialised so checks for session storage fail.
* Fixed Bug #11396: Auth_Container_Pear doesn't work with latest changes to
pear.php.net. Fix by Adam Harvey.
* Fixed Bug #11476: SOAP5 container's _validateOptions() and _setDefaults()
functions where setting options into the wrong object parameter. Thanks to
Köles Mihály for fix.
1.5.2 (stable, 2007-06-12)
Release notes

License: PHP License

* Feature Request #10729: Optionally regenerate session id on every page request.
Thanks to Bernhard for patch.
* Fixed Bug #10785: Notice when Auth::logout() called with a login callback
defined but no user logged in. Suggested fix thanks to Sascha Grossenbacher.
1.5.1 (stable, 2007-03-22)
Release notes

License: PHP License

* Added missing optional dependancy on PEAR Log to package.xml
* Fixed Bug #10125: Auth_Container_LDAP::fetchData only fetching attributes for
first entry.
1.5.0 (stable, 2007-02-12)
Release notes

License: PHP License

* Completed Request #2229: Ability to attach fall through containers. This
is implemented through the use of a new container Auth_Container_Multiple.
See multi-container.php in examples directory.
* Completed Request #4126: Enhancements to Advanced Security Mode. Thanks
to makler at man dot torun dot pl.
* Completed Request #6949: Use Log package for debugging messages. See logging.php
in examples directory.
* Completed Request #7089: Add optional extra WHERE options to DB and MDB(2)
containers.
* Fixed Bug #9944: Logging constants not defined when logging disabled.
* Fixed Bug #10000: Stupid developer didn't stop to look what he was doing
and broke things.
* Fixed Bug #10004: Logging of connection failures in LDAP container missing.
1.5.0RC2 (beta, 2007-02-01)
Release notes

License: PHP License

* Fixed Bug #9944: Logging constants not defined when logging disabled.
* Fixed Bug #10000: Stupid developer didn't stop to look what he was doing
and broke things.
* Fixed Bug #10004: Logging of connection failures in LDAP container missing.
1.5.0RC1 (beta, 2007-01-17)
Release notes

License: PHP License

* Completed Request #2229: Ability to attach fall through containers. This
is implemented through the use of a new container Auth_Container_Multiple.
See multi-container.php in examples directory.
* Completed Request #4126: Enhancements to Advanced Security Mode. Thanks
to makler at man dot torun dot pl.
* Completed Request #6949: Use Log package for debugging messages. See logging.php
in examples directory.
* Completed Request #7089: Add optional extra WHERE options to DB and MDB(2)
containers.
* Add ability to pass an instanciated DB, MDB or MDB2 database connection to each
of the respective Auth Containers.
1.4.3 (stable, 2006-12-05)
Release notes

License: PHP License

* Fixed Bug #9380: Default Auth_Container_POP3 configuration not
working.
* Fixed Bug #9407: Add callback in checkAuth() process.
* Fixed Bug #9479: Typo in Auth_Container_KADM5::_checkServer causes
failure. Thanks to Matt T. Proud (khanreaper at nerp dot net).
1.4.2 (stable, 2006-11-09)
Release notes

License: PHP License

* Fixed Bug #9241: Callback functions where being passed a copy of
the login object instead of a reference to it under PHP4.
* Fixed Bug #9286: Comparison of passwords and their hashes could give
false positive.
1.4.1 (stable, 2006-10-27)
Release notes

License: PHP License

* Forgot to add Auth/Container/Array.php to package2.xml.
1.4.0 (stable, 2006-10-19)
Release notes

License: PHP License

* Added new SOAP container that makes use of the PHP5 SOAP Client. Thanks to
Marcel Oelke <puRe at rednoize dot com>. Fixes #2612.
* Added support for trying all the user accounts returned from an LDAP server
not just the first one so as to support authenticating against Lotus Notes
which allows identical usernames where the only difference is the password.
Fixes #5365.
* Added new Array container for simple authentication setups where it's easier
to list users in the file than setup some sort of backend. Thanks to
georg_1 at have2 dot com. Fixes #5832.
* Added KADM5 container that makes use of the PECL kadm5 extension to
authenticate against Kerberos 5 servers. Thanks to Andrew Teixeira
<ateixeira at gmail dot com>. Fixes #6671.
* Fixed #8597. Remove references to $GLOBALS['HTTP_*_VARS'] now that we require
PHP 4.3.3+ for other reasons.
* Added SAP container that makes use of the SAPRFC extension available from
http://saprfc.sourceforge.net/. Thanks to Stoyan Stefanov <ssttoo at gmail dot com>.
Fixes #8637.
* Fix #8599. Allow identifier quoting in DB, DBLite, MDB and MDB2 backends to
be switched off by developer.
* Fix Bug #8732: Auth_Container_DB having problems with SQLite databases.
SQLite returns the name of quoted field names including the quotes instead
of stripping the quotes like all other DBs.
* Fix Bug #8735: Auth_Container_File::addUser() working on different instances
of File_Passwrd object.
1.4.0RC3 (beta, 2006-09-20)
Release notes

License: PHP License

* Fix Bug #8732: Auth_Container_DB having problems with SQLite databases.
SQLite returns the name of quoted field names including the quotes instead
of stripping the quotes like all other DBs.
* Fix Bug #8735: Auth_Container_File::addUser() working on different instances
of File_Passwrd object.
1.4.0RC1 (beta, 2006-09-10)
Release notes

License: PHP License

* Added new SOAP container that makes use of the PHP5 SOAP Client. Thanks to
Marcel Oelke <puRe at rednoize dot com>. Fixes #2612.
* Added support for trying all the user accounts returned from an LDAP server
not just the first one so as to support authenticating against Lotus Notes
which allows identical usernames where the only difference is the password.
Fixes #5365.
* Added new Array container for simple authentication setups where it's easier
to list users in the file than setup some sort of backend. Thanks to
georg_1 at have2 dot com. Fixes #5832.
* Added KADM5 container that makes use of the PECL kadm5 extension to
authenticate against Kerberos 5 servers. Thanks to Andrew Teixeira
<ateixeira at gmail dot com>. Fixes #6671.
* Fixed #8597. Remove references to $GLOBALS['HTTP_*_VARS'] now that we require
PHP 4.3.3+ for other reasons.
* Added SAP container that makes use of the SAPRFC extension available from
http://saprfc.sourceforge.net/. Thanks to Stoyan Stefanov <ssttoo at gmail dot com>.
Fixes #8637.
* Fix #8599. Allow identifier quoting in DB, DBLite, MDB and MDB2 backends to
be switched off by developer.
1.3.2 (stable, 2006-08-30)
Release notes

License: PHP License

* Fixed Bug #8524: Notice from attempting to perform string operation on what
might be an array in DB, DBLite, MDB and MDB2. Thanks to dozoyousan at gmail
dot com.
* Remove debug message from RADIUS Container when using CHAP_MD5 or MSCHAPv1
style passwords. Thanks to Stoyan Stefanov <ssttoo at gmail dot com> for
pointing out this 3yr old bug.
1.3.1 (stable, 2006-08-20)
Release notes

License: PHP License

* Fixed Bug #7031: session_regenerate_id() not cleaning up old session storage.
Fix for this bug in PHP5.1.0+ has been done, still a problem in older versions
of PHP.
* Fixed Bug #7421: Allow false to be passed in for allowLogin and advancedSecurity
options.
* Fixed Bug #7434: Enable start_tls support for LDAP Container by Stuart Prescott
<php.net@nanonanonano.net>
* Fixed Bug #7537: Made File Container capable of using all File_Passwd backends.
* Fixed Bug #7841: Added missing </center>. Really the whole frontend needs
reworking.
* Fixed Bug #7860: Removed deprecated session_register call.
* Fixed Bug #7899: sessionValidThru() returning incorrect value when no idle
timeout set.
* Fixed Bug #7956: Session handling had several security bugs before PHP4.3.3.
Bumped PHP dependancy so we don't have to deal with them.
* Fixed Bug #8076: MDB & MDB2 Containers not using default db_fields values
* Fixed Bug #8351: Documentation of $loginFailedCallback pointed to incorrect
set function.
* Fixed Bug #8406: Error message updates by Adam Harvey <pear@adamharvey.name>
* Fixed Bug #8407: Database containers don't quote table/field names by Adam
Harvey <pear@adamharvey.name>
1.3.1RC1 (beta, 2006-08-10)
Release notes

License: PHP License

This release candidate is test the numerous fixes described below. It is also
to get feedback on the change made for Bug #8407. Bug #8407 adds automatic
quoting of table and field names used in SQL in the Database backends.

* Fixed Bug #7031: session_regenerate_id() not cleaning up old session storage.
Fix for this bug in PHP5.1.0+ has been done, still a problem in older versions
of PHP.
* Fixed Bug #7421: Allow false to be passed in for allowLogin and advancedSecurity
options.
* Fixed Bug #7434: Enable start_tls support for LDAP Container by Stuart Prescott
<php.net@nanonanonano.net>
* Fixed Bug #7537: Made File Container capable of using all File_Passwd backends.
* Fixed Bug #7841: Added missing </center>. Really the whole frontend needs
reworking.
* Fixed Bug #7860: Removed deprecated session_register call.
* Fixed Bug #7899: sessionValidThru() returning incorrect value when no idle
timeout set.
* Fixed Bug #7956: Session handling had several security bugs before PHP4.3.3.
Bumped PHP dependancy so we don't have to deal with them.
* Fixed Bug #8076: MDB & MDB2 Containers not using default db_fields values
* Fixed Bug #8351: Documentation of $loginFailedCallback pointed to incorrect
set function.
* Fixed Bug #8406: Error message updates by Adam Harvey <pear@adamharvey.name>
* Fixed Bug #8407: Database containers don't quote table/field names by Adam
Harvey <pear@adamharvey.name>
1.3.0 (stable, 2006-03-02)
Release notes

License: PHP License

This is the final stable release of Auth 1.3.0. This version contains many new
features over previous versions. Summary of changes:

* New MDB2 container [30/March/2004 - quipo]
* New PEAR container, authenticate against pear.php.net [16/Dec/2003 - yavo]
* New Advanced Security mode to catch man-in-the-middle attacks.
* Added options for changing the post variables, patch supplied by Moritz
Heidkamp <moritz.heidkamp@invision-team.de>
* New DBLite container, same as DB but with the user manipulation functions
removed (50% smaller).
* Split login form to Auth_Frontend_HTML with goal to make it easily
customisable.

Numerous other small fixes and improvements to all storage containers thanks
to the following people: Matt Eaton, Jeroen Houben, Cipriano Groenendal,
Markku Turunen, Matthew Van Gundy, marc at practeo dot ch and I'm sure many
others that have contributed over the years it's taken to get this release
out.
1.3.0RC7 (beta, 2006-03-01)
Release notes

License: PHP License

This release is primarily a coding standard clean-up before the 1.3.0 final
release.

In addition the following improvements to the LDAP Container where supplied
by Hugues Peeters <hugues.peeters@claroline.net>.
* Changed default attrformat to AUTH so that loaded attributes are
presented in the same format as other backends provide.
* Added compatibility support to 1.2 style configuration options
* Attributes option now accepts a comma seperated string as well as
as array the same as db_fields in the DB, MDB and MDB2 backends.

Finally there are additional checks that the relevant PHP module is loaded
when loading the IMAP and VPOPMail Containers.
1.3.0RC6 (beta, 2006-02-21)
1.3.0r5 (beta, 2006-02-21)
Release notes

License: PHP License

* Fixed Bug #2873: Allow calling programs to gracefully handle being unable
to connect/bind to LDAP server.
* Fixed Bug #4918: Added support to specify which authentication method to
prefer when authenticating against a POP3 backend.
* Fixed Bug #6644: Added support for LDAP_OPT_REFERRALS. Setting to false can
improve compatibility with Active Directory.
* Fixed Bug #6791: Made all calls to call_user_func() call_user_func_array and
made calls consistant per change done in 1.3.0r3.
* Fixed Bug #6803: depreciated DB function. Now requires DB >= 1.6.0
* Fixed Bug #6808: Whenever Auth_Container_DB attempts to change the database
make sure the connection/DB object exists and is correct before attempting to
use the DB quoting features.
1.3.0r4 (beta, 2006-02-14)
Release notes

License: PHP License

This release fixes a security issue that allows an attacker to perform
injection attacks against the underlying storage containers. Upgrading
is strongly recommended if you are using beta releases of the Auth
package.

* Improved parameter validation in the DB and LPAP containers. (Patch
provided by Matthew Van Gundy.)
* Fixed Bug #3101: Wrong variable names in Auth/Container/File.php (mike)
* renamed supportsChallengeResponce() to supportsChallengeResponse()
in the DB container (quipo)
* Fixed Bug #4347: recognition of DB and MDB objects passed as dsn
* Fixed Bug #6324: updated MDB2 container
* Fixed Bug #5174: "Only variable references should be returned by reference"
bug in _factory()
* Fixed Bug #2446: english language typos.
This results in a BC break for any custom containers that have implemented
supportsChallengeResponce(). Also all containers already
supportsChallengeResponse() instead of supportsChallengeResponce() and
therefore the call in Auth_Frontend_Html always called the default
implementation and not the container implementation.
1.2.4 (stable, 2006-02-14)
1.3.0r3 (beta, 2004-09-20)
Release notes

License: PHP License

* Moved login screen generation code to Auth/Frontend/Html.php
In the future the frontend will be configurable.
* Implemented support for Challenge / Responce password authenthication
have to enable advanced security $auth->setAdvancedSecurity
will work only with DB container and cryptType = none|md5
* Implemented setAllowLogin to control which pages are allowed to perform login,
to preservce BC. Previusly the showLogin flag was used to control this - yavo
* Implmented lazy loading for the storage constructor, constructor is only created when needed
to make Auth more lightweight (this might be adding a bit more overhead to login and usermanagement functions)
* Removed include of PEAR, was not used anywhare in Auth.php
* Created a new storage container DBLite same as DB but with the user manipulation functions removed (50% smaller)
* Added a new method staticCheckAuth which can be called statically with only the auth options
* Auth::importGlobalVariable method was removed and replaced by references to global variables
* Removed all calls to $session[$this->_sessionName], made local reference session point to that instead
* Changed call_user_func to call_user_func_array for the callbacks, to avoid using @ for passing variables by reference
* Code Cleanup, removed most vi comments
1.3.0r2 (beta, 2004-07-04)
1.3.0r1 (beta, 2004-06-09)
Release notes

License: PHP License

* Changes to LDAP container:
- check for loaded ldap extension at startup as suggested by Markku Turunen
- make ldap version configurable via config array
- documentation fix for active directory default user container
[ 14/Jun/2004 - jw]
* Added an Auth_Controller class, to manage automatic redirection to login page and redirect back
to the calling page [04/06/2004 - Yavo]
* Changes to LDAP container:
- additional attribute fetching to authData via new option attributes
- utf8 encoding username for ldapv3 (fixes german umlaut problem)
- make scope definable for user and group searching seperately
- remove useroc, groupoc and replace them with userfilter, groupfilter which is way more flexible
- updated documentation on all new and changed parameters
As some of the parameters changed this one is not backwards compatible to earlier versions.
Look at the top of the class where all parameters are explained in detail.
[08/April/2004 - jw]
* Added new MDB2 container [30/March/2004 - quipo]
* Implements changePassword and CS fixed, patch from Cipriano Groenendal <cipri@cipri.com>
[29/March/2004 - yavo]
* Added options for changing the post variables, patch supplied by Moritz Heidkamp <moritz.heidkamp@invision-team.de>
[03/March/2004 - yavo]
* Added method setAdvancedSecurity and set advanced security to off by default, if turned on auth will perform additional
security checks if ip or user agent has changed across requests
* Login is now performed only if showLogin is true, do not allow for logins to be performed from any page which calls auth->start
spotted by Matt Eaton <pear@divinehawk.com> [16/Jan/2004 - yavo]
* Fixed bug noted by Jeroen Houben <jeroen@terena.nl>, calling loginFailedCallback
would not have the proper status set [16/Jan/2004 - yavo]
* Added PEAR container, authenticate the user against the pear web site
(probably php.net also) [16/Dec/2003 - yavo]
1.2.3 (stable, 2003-12-14)
Release notes

License: PHP License

* new Method to auth_container getUser()
* New Auth_Container_File, using new File_Passwd class. Provided by Michael Wallner <mike@php.net>
* Login/Logout callbacks now get a reference to auth
* New Login Failed Callback added (method setFailedLoginCallback)
* SOAP container patch to keep a reference to the Soap responce by Bruno Pedro <bpedro@co.sapo.pt>
* Auth is now installed in /pear-dir/Auth.php instead of /pear-dir/Auth/Auth.php, an
empty file /pear-dev/Auth/Auth.php wich includes Auth.php is added for BC
* The contaner now gets a reference to the auth object ($auth->storage->_auth_obj)
*Some patches from the pear-dev list bellow
-maka3d@yahoo.com.br - Patch to use a method of the container in Auth_Container::verifyPassword
-Lorenzo Alberton <l.alberton@quipo.it> - Patch to use variable session variable name, untill now the variable auth was used
-Marcos Neves <maka3d@yahoo.com.br> - Avaoid error when calling getAuthData() before the login
1.2.2 (stable, 2003-07-28)
Release notes

License: PHP License

* Added support for passing contaner as an object
* Added fix when db_fileds is *
* Added Test Suite (experimental)
* Added generic support for arbitrary password crypting functions
different than MD5, DES and plain text. (Patch by Tom Anderson)
* Added new MDB storage container written by Lorenzo Alberton
* Added new Container for SAMBA password files (SMBPasswd)
1.2.1 (stable, 2003-07-28)
1.2.0 (stable, 2003-02-14)
1.1.1 (stable, 2002-10-04)
1.1.0 (stable, 2002-10-03)
1.0.2 (stable, 2002-05-30)

Bugs

ID	Status	Type	Version	Date	Summary
#75	Bogus	Bug		2003-10-07	Missplaced "?>" tag
#76	Closed	Bug		2003-10-07	A password of "test<space>" is not validated
#92	Closed	Bug		2003-10-13	DOS line endings cause errors on Linux
#106	Closed	Bug		2003-10-15	session started without check if session already exists
#250	Closed	Bug		2003-11-14	cryptType handling is incomplete in DB-Containers addUser-Method
#251	Duplicate	Bug		2003-11-14	cryptType handling is incomplete in DB-Containers addUser-Method
#711	Closed	Bug		2004-02-09	BACKDOOR in auth package
#798	Closed	Bug		2004-02-19	Auth_Container_DB::_connect doesn't not take care of optional parameters w/Patch
#855	Closed	Bug		2004-02-25	[PATCH] Auth::changePassword implementation
#935	Closed	Bug		2004-03-03	$HTTP_POST_VARS / $_POST array keys
#1062	No Feedback	Bug		2004-03-24	Ldap auth
#1259	Closed	Bug		2004-04-22	error in documentation
#1326	Closed	Bug		2004-05-02	Fixes for CVS version, Some accessped but most not
#1401	Closed	Bug		2004-05-13	IMAP authentication fails due to error in code
#1535	Closed	Bug		2004-06-01	Auth session variable name is random
#1599	Closed	Bug		2004-06-10	Auth 1.3.0r1 - Duplicate call to session_start()
#1655	Bogus	Bug		2004-06-16	page hangs with no error display
#1759	Duplicate	Bug		2004-06-30	tarball looks corrupt
#1760	Duplicate	Bug		2004-06-30	tarball looks corrupt
#1779	Bogus	Bug		2004-07-02	PEAR Auth and php-4.3.7 incompatibility
#1802	Closed	Bug		2004-07-05	getAuth() is always Bool(false)
#1813	Closed	Bug		2004-07-07	Anonymous BIND Breaks for 1.3.0r2
#1885	Bogus	Bug		2004-07-15	join(order, wrong)
#1893	No Feedback	Bug		2004-07-16	Auth brings blank pages...
#1894	No Feedback	Bug		2004-07-16	checkAuth() BC break?
#1897	Closed	Bug		2004-07-16	Error in login because of bad string check..
#2021	Closed	Req		2004-07-30	Session fixation attack vulnerability
#2060	Wont fix	Bug		2004-08-05	Invalid directory structure in Auth 1.3 r2 tarball
#2130	Closed	Bug		2004-08-16	Typo in Auth.php
#2139	Closed	Bug		2004-08-16	Problems with sessions
#2149	Closed	Bug		2004-08-17	[doc] typo in "Custom Storage Containers"
#2186	Closed	Bug		2004-08-21	dont use get_parent_class to check if its child of db_common
#2229	Closed	Req		2004-08-26	Ability to attach fall through containers
#2245	Closed	Bug		2004-08-29	1.3.0r2 - typo in container DB.php
#2270	Closed	Bug		2004-09-01	Package Auth can't read my RDBMS.
#2321	Bogus	Bug		2004-09-13	Serious Reload authentication bug
#2395	Closed	Bug		2004-09-25	Warning error in Auth v.1.3.0r3
#2446	Closed	Bug		2004-10-04	english errors in DB container
#2496	Closed	Bug		2004-10-11	Installation fails because of zero-length .tmpusers file
#2497	Bogus	Bug		2004-10-11	'db_fields' parameter has no effect
#2612	Closed	Req		2004-10-25	Auth - PHP5 SOAP Container
#2700	Closed	Bug		2004-11-05	php5 warning on login
#2763	Closed	Req		2004-11-15	Invalid HTML in login form
#2764	Closed	Bug		2004-11-15	Auth fails after first page without cookies
#2765	Open	Req		2004-11-15	Persistent cookies
#2873	Closed	Bug		2004-12-02	Auth_Container_LDAP: Could not bind to LDAP server. halted script execution
#2892	Closed	Bug		2004-12-04	Improper path in Container/RADIUS.php::require_once()
#2932	Closed	Bug		2004-12-09	[doc] Introduction Example doesn't work
#3099	Closed	Bug		2005-01-04	Bad is_null() check in getAuthData($name = null)
#3101	Closed	Bug		2005-01-04	Wrong variable names in Auth/Container/File.php
#3223	Closed	Req		2005-01-17	When exactly is the login form callback called?
#3226	Bogus	Bug		2005-01-18	Missing portability option with DB storage
#3279	Bogus	Req		2005-01-24	Session storage
#3664	Closed	Bug		2005-03-02	call-time pass-by-reference error on line 430
#3795	Closed	Bug		2005-03-12	throws error with non-array "dsn"?
#3918	No Feedback	Req		2005-03-22	Support for Atom authentication
#4126	Closed	Req		2005-04-12	Auth AdvancedSecurity patch
#4216	Closed	Bug		2005-04-24	contributing documentation
#4242	Bogus	Bug		2005-04-28	$loginFunction cannot be a method
#4283	Wont fix	Req		2005-05-05	new option for IMAP container
#4347	Closed	Bug		2005-05-14	MDB and DB Containers fail to recognize if DB and MDB objects are passed as dsn
#4371	Closed	Bug		2005-05-17	Introduction documentation error
#4901	Closed	Bug		2005-07-24	Usage of Crypt_CHAP classes by Auth_RADIUS
#4917	No Feedback	Req		2005-07-26	Search filter for LDAP Container
#4918	Closed	Req		2005-07-26	POP3 Container and Net::POP3 authentication
#4992	Wont fix	Bug		2005-08-04	Search for login name is case insensitive (DB, MySQL)
#5026	Duplicate	Bug		2005-08-08	Call-time pass-by-reference deprecated
#5096	Closed	Bug		2005-08-15	SOAP container fix to wsdl work
#5174	Closed	Bug		2005-08-22	Notice: Only variable references should be returned by reference
#5365	Closed	Bug		2005-09-12	LDAP Container: ldap_count_entries error
#5822	No Feedback	Bug		2005-10-29	Tests are broken
#5823	Bogus	Bug		2005-10-29	unset var on use
#5832	Closed	Req		2005-10-31	Array Container for username/password combos
#5846	Closed	Bug		2005-11-01	Auth_Container_File broken when using Auth_HTTP
#6101	Closed	Bug		2005-11-28	Passing a custom storage object causes error
#6289	Closed	Bug		2005-12-19	Online Docs miss documentation of Auth::logout()
#6324	Closed	Bug		2005-12-22	MDB2 related fixes
#6489	Wont fix	Bug		2006-01-14	checkAuth() is marked private, should be public
#6644	Closed	Bug	1.3.0	2006-01-31	LDAP & Active Directory 2003 (LDAP_OPT_REFERRALS)
#6651	Closed	Req		2006-02-01	Add clarification for custom login functions
#6671	Closed	Req	1.3.0r3	2006-02-02	Have created a KADM5 Container for Kerberos authentication
#6785	Duplicate	Bug		2006-02-14	New version Auth (1.2.4) wont install/upgrade ERROR: bad md5sum for file /var/w
#6786	Closed	Bug	1.2.4	2006-02-14	Upgrade/install faliure of Auth 1.2.3 ERROR: bad md5sum for file /var/www/pear/
#6791	Closed	Bug	1.3.0r4	2006-02-15	Wrong function used (call_user_func_array)
#6803	Closed	Req	1.3.0r4	2006-02-16	depreciated DB function
#6808	Closed	Bug	1.3.0r4	2006-02-17	can't add user with DB container
#6851	Closed	Bug	1.3.0r5	2006-02-21	Double quotes in db login check
#6934	Bogus	Bug	CVS	2006-02-25	asd
#6949	Closed	Req	1.3.0RC6	2006-02-27	Use PEAR::LOG class for debug messages
#6959	Closed	Req		2006-02-28	Auth::LDAP Small Refactoring
#7031	Closed	Req	1.3.0	2006-03-06	I hope not to use "session_regenerate_id".
#7043	Closed	Bug	1.3.0	2006-03-06	Documentation -- Auth constructor now calls session_start()
#7089	Closed	Req	1.3.0	2006-03-10	Add a WHERE clause in Auth request with DB container
#7111	Bogus	Bug		2006-03-13	Auth doesn't reload DB field content if auth rechecked from session
#7421	Closed	Req	1.3.0	2006-04-19	constructor option allowLogin doesn't work
#7434	Closed	Req	1.3.0	2006-04-20	(patch) Enable start_tls support for LDAP container
#7511	No Feedback	Bug	1.3.0	2006-04-28	setExpire() do not logout user.
#7537	Closed	Bug	1.3.0	2006-05-01	File storage not working/limited
#7654	Closed	Bug	1.3.0	2006-05-17	options retrieved by parse_ini_file do not work with Auth_LDAP due to triple =
#7734	Closed	Req	1.3.0	2006-05-26	Documentation should mention Auth's use of session_regenerate_id
#7841	Closed	Bug	1.3.0	2006-06-08	minor html bug, missing </center> tag on login form
#7860	Closed	Req	1.3.0	2006-06-10	Don't use session_register!
#7899	Closed	Bug		2006-06-14	Auth::sessionValidThru() returns wrong value
#7900	Closed	Req		2006-06-14	example missing
#7956	Bogus	Bug	1.3.0	2006-06-21	loosing auth status after session_regenerate_id
#8076	Closed	Bug	1.3.0	2006-06-29	MDB2 Container's default 'db_fields' option breaks listUsers
#8351	Closed	Bug	1.3.0	2006-08-03	setLoginFailedCallback missing
#8406	Closed	Bug	CVS	2006-08-09	Error message updates
#8407	Closed	Bug	CVS	2006-08-09	Database containers don't quote table/field names
#8513	Closed	Req		2006-08-19	I suggest to highlight that: password by default should be md5 encrypted.
#8524	Closed	Bug	1.3.1	2006-08-21	DBlite Container: Notice message
#8597	Closed	Req	1.3.2	2006-08-31	Code cleanup. Remove the $GLOBALS['HTTP_*_VARS']
#8599	Closed	Bug	1.3.2	2006-08-31	connection postgres auth table failed
#8637	Closed	Req	1.3.2	2006-09-05	SAP container proposal
#8732	Closed	Bug	1.3.2	2006-09-19	Login always fails without $options['db_fields'] = '*';
#8735	Closed	Bug	1.3.2	2006-09-19	$auth->addUser() method fails with File container
#8740	Closed	Doc		2006-09-20	Typo in documentation for PEAR::Auth::setAllowLogin
#9241	Closed	Bug	1.4.1	2006-11-06	call_user_func_array: $this instaed of &$this
#9277	Wont fix	Req	1.4.1	2006-11-08	md5 salts
#9286	Closed	Bug	1.4.1	2006-11-09	Should use strcmp not == to compare passwords
#9313	Closed	Bug	1.4.2	2006-11-12	Using start() page stop
#9380	Closed	Bug	1.4.2	2006-11-19	Auth via POP3: lost $server default value
#9407	Closed	Bug	1.4.2	2006-11-21	Add callback for extra validity checks by developer
#9479	Closed	Bug	1.4.2	2006-11-27	Typo in _checkServer causes failure - Fix Included.
#9554	Bogus	Bug	1.4.3	2006-12-05	Bug #9479 breaks Auth_Container_KRB5
#9580	Bogus	Bug	1.4.3	2006-12-08	Upgrade to 1.4.3 stops my Auth sites from logging on
#9668	Closed	Req	1.4.3	2006-12-20	Move to package.xml v2
#9696	Closed	Bug	CVS	2006-12-26	Auth since 1.3.1: DB Container option "table" is to much restricted
#9726	Bogus	Bug	1.4.3	2007-01-03	Can't login with Postgresql and no public schema
#9856	Bogus	Bug	1.4.3	2007-01-17	cookie set everytime new Auth() is called
#9866	Bogus	Bug	1.4.3	2007-01-18	Bug in Auth/Container/POP3.php
#9944	Closed	Bug	1.5.0RC1	2007-01-25	Use of undefined constant PEAR_LOG_DEBUG
#10000	Closed	Bug	1.5.0RC1	2007-02-01	Undefined index: final_table, if a MDB2 Object is given
#10004	Closed	Bug	1.5.0RC1	2007-02-01	Debug messages in LDAP container are unhelpful
#10059	Closed	Doc	1.4.3	2007-02-08	Columns in capital
#10125	Closed	Bug	1.5.0	2007-02-19	LDAP fetchData only work for 1 entry
#10729	Closed	Req	1.5.1	2007-04-14	session_regenerate_id() should be called every time start() is called
#10785	Closed	Bug	1.5.1	2007-04-20	STRICT error
#11208	Bogus	Bug	1.5.1	2007-06-02	session_regenerate_id() problem
#11396	Closed	Bug	1.5.2	2007-06-21	Auth_Container_Pear doesn't work
#11476	Closed	Bug	1.5.2	2007-06-28	Wrong usage of options in SOAP5 container: _validateOptions and _setDefaults
#11499	Closed	Bug	1.5.3	2007-07-02	Missing argument in the call of $this->_validateOptions() in $this->fetchData()
#11512	No Feedback	Bug	1.5.4	2007-07-03	three quotation marks in place of one in "fetchData"
#11821	Bogus	Bug	1.5.4	2007-08-12	setSessionName() does not work fully
#12061	Closed	Req	1.5.4	2007-09-17	in Auth_Container_DB::_prepare() no schema changed allowed
#12074	Bogus	Bug	1.5.4	2007-09-18	Auth LDAP is not managing ldap_connect result code properly
#12087	Closed	Req	1.5.4	2007-09-20	setAdvancedSecurity parameters
#12112	Closed	Bug	1.5.4	2007-09-25	Allow control of domain and path for cookies
#12156	Closed	Doc	1.5.4	2007-09-30	Correction to doc page for Auth::setSessionName()
#12537	Closed	Req	1.5.4	2007-11-27	No ability to delete data set with setAuthData()
#12739	Closed	Bug	1.5.4	2007-12-20	doesn't post properly
#13202	Wont fix	Req	1.5.4	2008-02-25	cannot use array in login form
#13304	Closed	Doc	1.5.4	2008-03-04	Clarify getAuth() and checkAuth()
#13337	Closed	Req	1.5.4	2008-03-07	Vpopmaild Container
#13418	Closed	Req	1.5.4	2008-03-17	Options for PEAR container
#13579	Duplicate	Bug	1.6.1	2008-04-04	Syntax error, unexpected ')' in Container/{DB,MDB,MDB2,DBLite}.php
#13580	Duplicate	Bug	1.6.1	2008-04-04	Extra ")" in DB.php
#13627	Closed	Bug	1.6.2	2008-04-08	Add crypt mode to File container
#13756	Closed	Bug	1.6.1	2008-04-23	Variable name mispelling in SAP
#13757	Closed	Bug	1.6.1	2008-04-23	AUTH_LOG_ERR used but not defined
#13782	No Feedback	Bug	1.6.1	2008-04-27	MDB2 Container does not do quoting
#14153	Wont fix	Doc	1.6.1	2008-06-16	PEAR Auth documentation sparse/lacking/nonexistant
#14248	Closed	Bug	1.6.1	2008-06-27	Typos fixes and corrections for documentation
#14259	Closed	Doc	1.6.1	2008-06-29	Logout functionality example changes
#14392	Closed	Doc	1.6.1	2008-07-23	setAdvancedSecurity documentation
#14446	Closed	Doc		2008-08-03	User note that is a documentation problem
#14447	Closed	Doc		2008-08-03	User note that is a documentation problem
#14825	Closed	Req	CVS	2008-10-18	Upgrade to PHPUnit 3
#14858	Feedback	Bug	1.6.1	2008-10-24	AdvancedSecurity in conflict with setSessionName
#14883	Duplicate	Req	CVS	2008-10-26	Improve unit test behaviour
#14966	Bogus	Bug	1.6.1	2008-11-06	Strict checkis show problems
#15466	Closed	Doc		2008-12-30	User note that is a documentation problem
#15657	Closed	Req	1.6.1	2009-01-16	Auth to use HTTP_Session2 ?
#16007	Wont fix	Req	1.6.1	2009-03-10	optional "is_active" field check
#16044	Closed	Bug	1.6.1	2009-03-19	Auth_Container_RADIUS and MSCHAPv1
#16059	Closed	Req	CVS	2009-03-31	Auth container for the CAS service
#16676	Closed	Bug	1.6.1	2009-10-03	Notices in PEAR container
#17097	Closed	Bug	CVS	2010-02-13	listUsers() throws "undefined variable" on file without users:
#17156	Closed	Req	SVN	2010-02-25	Don't call Auth::updateIdle() statically
#17284	Closed	Bug	1.6.2	2010-03-31	Auth_Container_File->fetchData doesn't match the parent's method
#17691	Closed	Bug	SVN	2010-08-10	PATCH: Using explode instead of split
#17831	Wont fix	Req	1.6.2	2010-08-29	start does not return drawLogin's return value
#17905	Bogus	Bug	1.6.2	2010-09-29	cannot untar auth 1.6.2 tar
#17992	Closed	Bug	1.6.3	2010-10-25	Package structure changed in 1.6.3
#18034	Wont fix	Req	1.6.4	2010-11-08	Support for Shibboleth / SAML
#18035	Open	Req	1.6.4	2010-11-09	Bug with session_regenerate_id()
#18097	Closed	Req	1.6.4	2010-12-05	Auth Log Observer
#18199	Closed	Bug	1.6.4	2011-01-17	Auth 1.6.4
#18554	Duplicate	Bug	1.6.4	2011-05-19	return value is deprecated
#18555	Spam	Bug	1.6.4	2011-05-19	return value is deprecated
#18977	Wont fix	Bug	1.6.4	2011-11-09	Deprecated Error
#19158	Open	Doc	1.6.4	2011-12-26	Logging issues
#19175	Closed	Bug	SVN	2011-12-30	provide userInfo when raising database errors
#19438	Closed	Bug	1.6.4	2012-05-27	MDB2 container does not handle non string value properly
#19670	Closed	Req	1.6.4	2012-10-23	Session_Name
#19704	Closed	Bug	1.6.4	2012-11-14	Array to string conversion notice pops up
#19805	Closed	Req	1.6.4	2013-01-29	Please Provides LICENSE file
#19806	Closed	Bug	1.6.4	2013-01-29	Bad role for md5.js
#20054	Closed	Bug	1.6.4	2013-08-23	Auth package files installed to wrong directory
#20221	Bogus	Req	Unknown	2014-03-17	Verify cert for LDAP
#20394	Spam	Doc	1.6.4	2014-09-06	Watch// Million Dollar Arm [ONLINE FOR FREE]
#20474	Spam	Bug	Unknown	2014-12-29	pehar
#23767	Open	Req	1.6.4	2018-09-03	PHP7.2 Reference Error