You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@accumulo.apache.org by "Eric Newton (JIRA)" <ji...@apache.org> on 2012/10/10 14:15:03 UTC
[jira] [Created] (ACCUMULO-800) don't log the instance.secret
Eric Newton created ACCUMULO-800:
------------------------------------
Summary: don't log the instance.secret
Key: ACCUMULO-800
URL: https://issues.apache.org/jira/browse/ACCUMULO-800
Project: Accumulo
Issue Type: Bug
Affects Versions: 1.3.6, 1.4.1
Reporter: Eric Newton
Priority: Trivial
Fix For: 1.4.2
Like passwords, logging the instance secret is probably not great for security.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (ACCUMULO-800) don't log the instance.secret
Posted by "Mike Drob (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/ACCUMULO-800?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mike Drob updated ACCUMULO-800:
-------------------------------
Labels: newbie (was: )
> don't log the instance.secret
> -----------------------------
>
> Key: ACCUMULO-800
> URL: https://issues.apache.org/jira/browse/ACCUMULO-800
> Project: Accumulo
> Issue Type: Bug
> Affects Versions: 1.4.1, 1.3.6
> Reporter: Eric Newton
> Priority: Trivial
> Labels: newbie
> Fix For: 1.4.2
>
>
> Like passwords, logging the instance secret is probably not great for security.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (ACCUMULO-800) don't log the instance.secret
Posted by "Christopher Tubbs (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/ACCUMULO-800?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Christopher Tubbs updated ACCUMULO-800:
---------------------------------------
Fix Version/s: 1.5.0
> don't log the instance.secret
> -----------------------------
>
> Key: ACCUMULO-800
> URL: https://issues.apache.org/jira/browse/ACCUMULO-800
> Project: Accumulo
> Issue Type: Bug
> Affects Versions: 1.4.1, 1.3.6
> Reporter: Eric Newton
> Priority: Blocker
> Labels: newbie
> Fix For: 1.5.0, 1.4.2
>
>
> Like passwords, logging the instance secret is probably not great for security.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (ACCUMULO-800) don't log the instance.secret
Posted by "Christopher Tubbs (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/ACCUMULO-800?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Christopher Tubbs updated ACCUMULO-800:
---------------------------------------
Priority: Blocker (was: Trivial)
> don't log the instance.secret
> -----------------------------
>
> Key: ACCUMULO-800
> URL: https://issues.apache.org/jira/browse/ACCUMULO-800
> Project: Accumulo
> Issue Type: Bug
> Affects Versions: 1.4.1, 1.3.6
> Reporter: Eric Newton
> Priority: Blocker
> Labels: newbie
> Fix For: 1.4.2
>
>
> Like passwords, logging the instance secret is probably not great for security.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (ACCUMULO-800) don't log the instance.secret
Posted by "Eric Newton (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/ACCUMULO-800?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Eric Newton resolved ACCUMULO-800.
----------------------------------
Resolution: Fixed
fixed r1397177 and r1397176
> don't log the instance.secret
> -----------------------------
>
> Key: ACCUMULO-800
> URL: https://issues.apache.org/jira/browse/ACCUMULO-800
> Project: Accumulo
> Issue Type: Bug
> Affects Versions: 1.4.1, 1.3.6
> Reporter: Eric Newton
> Priority: Blocker
> Labels: newbie
> Fix For: 1.5.0, 1.4.2
>
>
> Like passwords, logging the instance secret is probably not great for security.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Comment Edited] (ACCUMULO-800) don't log the
instance.secret
Posted by "Eric Newton (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/ACCUMULO-800?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13476165#comment-13476165 ]
Eric Newton edited comment on ACCUMULO-800 at 10/15/12 2:22 PM:
----------------------------------------------------------------
fixed in r1397177 and r1397176
was (Author: ecn):
fixed r1397177 and r1397176
> don't log the instance.secret
> -----------------------------
>
> Key: ACCUMULO-800
> URL: https://issues.apache.org/jira/browse/ACCUMULO-800
> Project: Accumulo
> Issue Type: Bug
> Affects Versions: 1.4.1, 1.3.6
> Reporter: Eric Newton
> Priority: Blocker
> Labels: newbie
> Fix For: 1.5.0, 1.4.2
>
>
> Like passwords, logging the instance secret is probably not great for security.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (ACCUMULO-800) don't log the instance.secret
Posted by "Christopher Tubbs (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/ACCUMULO-800?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13475557#comment-13475557 ]
Christopher Tubbs commented on ACCUMULO-800:
--------------------------------------------
This seems like a trivial fix, but could be pretty important, so I put it as a blocker for 1.4.2.
[~mdrob], can you identify which specific log message you are referring to?
> don't log the instance.secret
> -----------------------------
>
> Key: ACCUMULO-800
> URL: https://issues.apache.org/jira/browse/ACCUMULO-800
> Project: Accumulo
> Issue Type: Bug
> Affects Versions: 1.4.1, 1.3.6
> Reporter: Eric Newton
> Priority: Blocker
> Labels: newbie
> Fix For: 1.5.0, 1.4.2
>
>
> Like passwords, logging the instance secret is probably not great for security.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira