LDAP password shown as clear text in log

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Major
    • 2.3.0.patch, 2.4.0.patch
    • Affects Version/s: 2.3.0.patch, 2.4.0.patch
    • Component/s: provisioning
    • None
    • Environment:
      Grouper 2.3 API 108 UI 47 WS 12

      Hello,

      in my log, ldap password is show in clear text :

      [DefaultQuartzScheduler_Worker-6] INFO  LdapSystem.buildLdapConnectionPool(92) -  - Setting up LDAP Connection with properties: {org.ldaptive.ldapUrl=ldap://ldapen.dll.in.ac-lille.fr:389, org.ldaptive.searchResultPagingEnabled=false, org.ldaptive.bindDn=uid=admin_grouper,ou=applications,ou=ac-lille,ou=education,o=gouv,c=fr, org.ldaptive.bindCredential=PassWord}

      Thanks,

      Yoann

            Assignee:
            Bert Bee-Lindgren (Inactive)
            Reporter:
            Yoann Delattre (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: