You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Ted Ross (JIRA)" <qp...@incubator.apache.org> on 2008/04/14 16:27:05 UTC
[jira] Created: (QPID-918) Authentication password is logged when
"trace" is enabled
Authentication password is logged when "trace" is enabled
---------------------------------------------------------
Key: QPID-918
URL: https://issues.apache.org/jira/browse/QPID-918
Project: Qpid
Issue Type: Bug
Components: C++ Broker
Affects Versions: M3
Reporter: Ted Ross
If trace is enabled on the broker, the "response" field of a "Start-Ok" method is logged. This field contains the authentication password in clear text.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (QPID-918) Authentication password is logged when
"trace" is enabled
Posted by "Carl Trieloff (JIRA)" <qp...@incubator.apache.org>.
[ https://issues.apache.org/jira/browse/QPID-918?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Carl Trieloff resolved QPID-918.
--------------------------------
Resolution: Fixed
Committed revision 652037.
> Authentication password is logged when "trace" is enabled
> ---------------------------------------------------------
>
> Key: QPID-918
> URL: https://issues.apache.org/jira/browse/QPID-918
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: M3
> Reporter: Ted Ross
> Attachments: qpid_918_structs_rb.patch.txt
>
>
> If trace is enabled on the broker, the "response" field of a "Start-Ok" method is logged. This field contains the authentication password in clear text.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (QPID-918) Authentication password is logged when
"trace" is enabled
Posted by "Senaka Fernando (JIRA)" <qp...@incubator.apache.org>.
[ https://issues.apache.org/jira/browse/QPID-918?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Senaka Fernando updated QPID-918:
---------------------------------
Attachment: qpid_918_structs_rb.patch.txt
Attached patch, qpid_918_structs_rb, solves this issue by replacing the content of the "response" field with "xxxxxx".
Regards,
Senaka
> Authentication password is logged when "trace" is enabled
> ---------------------------------------------------------
>
> Key: QPID-918
> URL: https://issues.apache.org/jira/browse/QPID-918
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: M3
> Reporter: Ted Ross
> Attachments: qpid_918_structs_rb.patch.txt
>
>
> If trace is enabled on the broker, the "response" field of a "Start-Ok" method is logged. This field contains the authentication password in clear text.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.