The permissions on this repository are being updated. This may take a while.
During this time, you or some of the project's contributors may not be able
to push to this repository.
844b1d2Ticket 365 - passwords in clear text in the audit log
4 files
Authored by Noriko Hosoi
11 years ago,
Committed by nhosoi11 years ago,
Ticket 365 - passwords in clear text in the audit log
Bug Description:
after changing a user password, an additional modify is added to the
mods: "unhashed#user#password: <clear text password>"
e.g. PSEUDO_ATTR_UNHASHEDUSERPASSWORD
Fix Description:
Added new config param "nsslapd-audit-logging-hide-unhashed-pw".
The default is "on". When "on" that single modify op is skipped from
the audit logging.
https://fedorahosted.org/389/ticket/365
(cherry picked from commit 43fb648fd4d7663c61c7ea7ff649ffddb9cbf006)
(Fixed a conflict in proto-slap.h; changed the default value of
"nsslapd-audit-logging-hide-unhashed-pw" to "on".)