mreynolds / 389-ds-base

Forked from 389-ds-base 6 years ago
Clone

844b1d2 Ticket 365 - passwords in clear text in the audit log

4 files Authored by Noriko Hosoi 11 years ago, Committed by nhosoi 11 years ago,
    Ticket 365 - passwords in clear text in the audit log
    
    Bug Description:
    after changing a user password, an additional modify is added to the
    mods: "unhashed#user#password: <clear text password>"
    
    e.g.  PSEUDO_ATTR_UNHASHEDUSERPASSWORD
    
    Fix Description:
    Added new config param "nsslapd-audit-logging-hide-unhashed-pw".
    The default is "on".  When "on" that single modify op is skipped from
    the audit logging.
    
    https://fedorahosted.org/389/ticket/365
    
    (cherry picked from commit 43fb648fd4d7663c61c7ea7ff649ffddb9cbf006)
    (Fixed a conflict in proto-slap.h; changed the default value of
     "nsslapd-audit-logging-hide-unhashed-pw" to "on".)
    
        
file modified
+17 -0
file modified
+19 -0
file modified
+2 -0