You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Emmanuel Lecharny (JIRA)" <ji...@apache.org> on 2007/10/17 18:09:51 UTC
[jira] Created: (DIRSTUDIO-228) Mask userPassword in the log view
Mask userPassword in the log view
---------------------------------
Key: DIRSTUDIO-228
URL: https://issues.apache.org/jira/browse/DIRSTUDIO-228
Project: Directory Studio
Issue Type: Improvement
Affects Versions: 1.0.1
Reporter: Emmanuel Lecharny
When adding a userPassword in an existing entry, the password is not shown in the main windows (which is a good idea). But when the entry is modified, the log view shows the entire ldif, with the password in clear text (or BASE64 encoded).
It would be much safer to replace the password with ****** in the ldif logs.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DIRSTUDIO-228) Mask userPassword in the log view
Posted by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-228?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Pierre-Arnaud Marcelot updated DIRSTUDIO-228:
---------------------------------------------
Component/s: studio-ldapbrowser
> Mask userPassword in the log view
> ---------------------------------
>
> Key: DIRSTUDIO-228
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-228
> Project: Directory Studio
> Issue Type: Improvement
> Components: studio-ldapbrowser
> Affects Versions: 1.0.1
> Reporter: Emmanuel Lecharny
> Assignee: Stefan Seelmann
> Fix For: 1.3.0
>
>
> When adding a userPassword in an existing entry, the password is not shown in the main windows (which is a good idea). But when the entry is modified, the log view shows the entire ldif, with the password in clear text (or BASE64 encoded).
> It would be much safer to replace the password with ****** in the ldif logs.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Assigned: (DIRSTUDIO-228) Mask userPassword in the log view
Posted by "Stefan Seelmann (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-228?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Stefan Seelmann reassigned DIRSTUDIO-228:
-----------------------------------------
Assignee: Stefan Seelmann
> Mask userPassword in the log view
> ---------------------------------
>
> Key: DIRSTUDIO-228
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-228
> Project: Directory Studio
> Issue Type: Improvement
> Affects Versions: 1.0.1
> Reporter: Emmanuel Lecharny
> Assignee: Stefan Seelmann
> Fix For: 1.3.0
>
>
> When adding a userPassword in an existing entry, the password is not shown in the main windows (which is a good idea). But when the entry is modified, the log view shows the entire ldif, with the password in clear text (or BASE64 encoded).
> It would be much safer to replace the password with ****** in the ldif logs.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (DIRSTUDIO-228) Mask userPassword in the log view
Posted by "Stefan Seelmann (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-228?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Stefan Seelmann resolved DIRSTUDIO-228.
---------------------------------------
Resolution: Fixed
Added a preference to define masked attributes:
http://svn.apache.org/viewvc?rev=696773&view=rev
By default none attribute is masked. Is this sufficient or should we mask userPassword by default?
> Mask userPassword in the log view
> ---------------------------------
>
> Key: DIRSTUDIO-228
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-228
> Project: Directory Studio
> Issue Type: Improvement
> Affects Versions: 1.0.1
> Reporter: Emmanuel Lecharny
> Assignee: Stefan Seelmann
> Fix For: 1.3.0
>
>
> When adding a userPassword in an existing entry, the password is not shown in the main windows (which is a good idea). But when the entry is modified, the log view shows the entire ldif, with the password in clear text (or BASE64 encoded).
> It would be much safer to replace the password with ****** in the ldif logs.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (DIRSTUDIO-228) Mask userPassword in the log view
Posted by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-228?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Pierre-Arnaud Marcelot closed DIRSTUDIO-228.
--------------------------------------------
> Mask userPassword in the log view
> ---------------------------------
>
> Key: DIRSTUDIO-228
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-228
> Project: Directory Studio
> Issue Type: Improvement
> Components: studio-ldapbrowser
> Affects Versions: 1.0.1
> Reporter: Emmanuel Lecharny
> Assignee: Stefan Seelmann
> Fix For: 1.3.0
>
>
> When adding a userPassword in an existing entry, the password is not shown in the main windows (which is a good idea). But when the entry is modified, the log view shows the entire ldif, with the password in clear text (or BASE64 encoded).
> It would be much safer to replace the password with ****** in the ldif logs.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DIRSTUDIO-228) Mask userPassword in the log view
Posted by "Stefan Seelmann (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-228?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Stefan Seelmann updated DIRSTUDIO-228:
--------------------------------------
Fix Version/s: 1.3.0
> Mask userPassword in the log view
> ---------------------------------
>
> Key: DIRSTUDIO-228
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-228
> Project: Directory Studio
> Issue Type: Improvement
> Affects Versions: 1.0.1
> Reporter: Emmanuel Lecharny
> Fix For: 1.3.0
>
>
> When adding a userPassword in an existing entry, the password is not shown in the main windows (which is a good idea). But when the entry is modified, the log view shows the entire ldif, with the password in clear text (or BASE64 encoded).
> It would be much safer to replace the password with ****** in the ldif logs.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.