Bug 1009013 - Require a user to change their password if they log in and their current password does not meet the password complexity rules
r=glob, a=sgreen

r=dkl a=sgreen

re-encrypted and their password does not match the current complexity
rule
r=dkl, a=glob

r=dkl, a=glob

Bug 785283 - Support increased values for PASSWORD_SALT_LENGTH without breaking compat with old hashes
[r=LpSolit a=LpSolit]

r/a=LpSolit

r=wicked a=LpSolit

Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and add it to files which miss one
r=kiko r=mkanat r=mrbball a=LpSolit

r/a=mkanat

Bug 575947: Users with passwords length less than 6 characters can't login after migration from 3.4.x or older to 3.6 or newer
r/a=mkanat

Bug 355283: Lock out a user account on a particular IP for 30 minutes if they fail to log in 5 times from that IP.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch by David Lawrence <dkl@redhat.com> = r/a=LpSolit

Patch by David Lawrence <dkl@redhat.com> - a/r=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch by Max Kanat-Alexander <mkanat@kerio.com>   r=vladd  a=justdave

patch by erik
r=joel, kiko
a=myk

patch by erik
r=joel
a=justdave

r= gerv, a= justdave

1). Factored code out from Bugzilla::Auth::DB->authenticate() into
separate methods so we can use them externally. Add extra API to DB.pm,
which is currently used only internally (pending part 2). r=bbaetz, a=justdave

r= bbaetz, a= justdave

patch by 'Randall M! Gee', r=bbaetz, a=justdave

r=gerv, justdave
a=justdave