directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Stefan Seelmann (JIRA)" <j...@apache.org>
Subject [jira] Resolved: (DIRSTUDIO-228) Mask userPassword in the log view
Date Thu, 18 Sep 2008 19:28:44 GMT

     [ https://issues.apache.org/jira/browse/DIRSTUDIO-228?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Stefan Seelmann resolved DIRSTUDIO-228.
---------------------------------------

    Resolution: Fixed

Added a preference to define masked attributes:
  http://svn.apache.org/viewvc?rev=696773&view=rev

By default none attribute is masked. Is this sufficient or should we mask userPassword by
default?


> Mask userPassword in the log view
> ---------------------------------
>
>                 Key: DIRSTUDIO-228
>                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-228
>             Project: Directory Studio
>          Issue Type: Improvement
>    Affects Versions: 1.0.1
>            Reporter: Emmanuel Lecharny
>            Assignee: Stefan Seelmann
>             Fix For: 1.3.0
>
>
> When adding a userPassword in an existing entry, the password is not shown in the main
windows (which is a good idea). But when the entry is modified, the log view shows the entire
ldif, with the password in clear text (or BASE64 encoded).
> It would be much safer to replace the password with ****** in the ldif logs.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message