#48134 Directory Server Admin Console: plaintext password logged in debug mode
Closed: wontfix None Opened 6 years ago by nhosoi.

Description of problem:
When the console is running in Debug mode, it logs passwords in plain text when
admin logs in console, creates a user with a password, etc.
By default we should mask passwords.

How reproducible:

Steps to Reproduce:
1. Run redhat-idm-console -D -f console.log
2. Log in console with your credentials. Open DS console, create a user with a
password, change admin password.
3. Check console.log for passwords that were used in [2].

Reviewed by Rich (Thank you!!)

Pushed to master:
2c8b2e6..2c3430c master -> master
commit 2c3430cf3c0e0a3f805fc174a7971bdb0ec4bb45

git patch file (idm-console-framework master) -- fixing a parse error

Reviewed by Rich (Thank you!!)

Pushed to master:
8f3302e..323bf2d master -> master
commit 323bf2d4468e64e8a05cc0572035ff7f37de995e

Metadata Update from @nhosoi:
- Issue assigned to nhosoi
- Issue set to the milestone: 389-admin,console 1.1.39

4 years ago

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/1465

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix (was: Fixed)

a year ago

Login to comment on this ticket.