The permissions on this repository are being updated. This may take a while.
During this time, you or some of the project's contributors may not be able
to push to this repository.
f91a1fdTicket 365 - passwords in clear text in the audit log
4 files
Authored by Noriko Hosoi
11 years ago,
Committed by rmeggins11 years ago,
Ticket 365 - passwords in clear text in the audit log
Bug Description: after changing a user password, an additional modify is added to the
mods: "unhashed#user#password: <clear text password>"
e.g. PSEUDO_ATTR_UNHASHEDUSERPASSWORD
Fix Description: Added new config param "nsslapd-audit-logging-hide-unhashed-pw".
The default is "on". When "on" that single modify op is skipped from
the audit logging.
https://fedorahosted.org/389/ticket/365
(cherry picked from commit 43fb648fd4d7663c61c7ea7ff649ffddb9cbf006)
(cherry picked from commit 2f24c1f557c3698fb0ecf36b8187b30a6223f8af)