You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@jclouds.apache.org by "Forrest Townsend (JIRA)" <ji...@apache.org> on 2015/02/19 23:41:13 UTC

[jira] [Created] (JCLOUDS-823) BackoffLimitedRetryHandler prints username and password involved in request

Forrest Townsend created JCLOUDS-823:
----------------------------------------

             Summary: BackoffLimitedRetryHandler prints username and password involved in request
                 Key: JCLOUDS-823
                 URL: https://issues.apache.org/jira/browse/JCLOUDS-823
             Project: jclouds
          Issue Type: Bug
    Affects Versions: 1.8.1
         Environment: Windows 7 (attempting to communicate to a devstack server on Ubuntu)
            Reporter: Forrest Townsend


When trying to communicate with a server that is offline, I will get an error that contains the username and password used in the request. 

OUTPUT
================================================

2015-02-10 10:56:36.707 ERROR [Thread-5] o.j.h.h.BackoffLimitedRetryHandler Cannot retry after server error, command has exceeded retry limit 5:
[method=org.jclouds.openstack.keystone.v2_0.AuthenticationApi.public
abstract org.jclouds.openstack.keystone.v2_0.domain.Access 
org.jclouds.openstack.keystone.v2_0.AuthenticationApi.
authenticateWithTenantNameAndCredentials
(java.lang.String,org.jclouds.openstack.keystone.v2_0.domain.PasswordCredentials)[admin, PasswordCredentials{username=admin, password=openstack}], request=POST http://xxxxxx:5000/v2.0/tokens HTTP/1.1]

================================================

Ignasi Barrera recommended me to suggest a change. Here was his comment from [stackoverflow|http://stackoverflow.com/questions/28460311/logging-in-jclouds-still-prints-retry-connection-error-to-console-with-credenti/28581604#28581604]
{quote}
"... that password is shown because the PasswordCredentials object prints it in the toString method. That method could be changed to just print ***** instead of the clear text password."
{quote}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)