[jira] Closed: (DIRSERVER-660) Only log passwords on debug level, but not INFO

["Emmanuel Lecharny (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/DIRSERVER-660?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Emmanuel Lecharny closed DIRSERVER-660.
---------------------------------------


> Only log passwords on debug level, but not INFO
> -----------------------------------------------
>
>                 Key: DIRSERVER-660
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-660
>             Project: Directory ApacheDS
>          Issue Type: Bug
>          Components: ldap
>         Environment: windows, linux
>            Reporter: Ralf Hauser
>
> So far, I have not configured apacheDS logging and I always see
> 33768450 [IoThreadPool-1] INFO org.apache.directory.server.ldap.LdapProtocolProvider$LdapProtocolHandler - [/127.0.0.1:34100] RECEIVED:     BindRequest
>         Version : '3'
>         Name : 'dn=hauser@acm.org'
>         Simple authentication : '111111/0x31 0x31 0x31 0x31 0x31 0x31 '
> While in a development environment, it is ok to log this, in a production environment it is not. I guess quite some production environments use the default, i.e. INFO
> furthermore, http://www.slf4j.org/docs.html is not particularly helpful how to change this...

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.