[jira] Commented: (DIRSERVER-660) Only log passwords on debug level, but not INFO

["Ralf Hauser (JIRA)" <ji...@apache.org>]

    [ http://issues.apache.org/jira/browse/DIRSERVER-660?page=comments#action_12418826 ] 

Ralf Hauser commented on DIRSERVER-660:
---------------------------------------

I also reported the lack of hints how to configure the logging to slf4j http://bugzilla.slf4j.org/show_bug.cgi?id=25

I looked at my log4j.properties and it does not have any appender for org.apache.directory, so I guess it is not found or apacheDS has its own config file somewhere?

if so, shouldn't this be described somewhere in http://directory.apache.org/subprojects/apacheds/docs/users/index.html ?

see also DIRSERVER-486 and DIRMINA-114

> Only log passwords on debug level, but not INFO
> -----------------------------------------------
>
>          Key: DIRSERVER-660
>          URL: http://issues.apache.org/jira/browse/DIRSERVER-660
>      Project: Directory ApacheDS
>         Type: Bug

>   Components: ldap
>  Environment: windows, linux
>     Reporter: Ralf Hauser

>
> So far, I have not configured apacheDS logging and I always see
> 33768450 [IoThreadPool-1] INFO org.apache.directory.server.ldap.LdapProtocolProvider$LdapProtocolHandler - [/127.0.0.1:34100] RECEIVED:     BindRequest
>         Version : '3'
>         Name : 'dn=hauser@acm.org'
>         Simple authentication : '111111/0x31 0x31 0x31 0x31 0x31 0x31 '
> While in a development environment, it is ok to log this, in a production environment it is not. I guess quite some production environments use the default, i.e. INFO
> furthermore, http://www.slf4j.org/docs.html is not particularly helpful how to change this...

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira