Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] PSPNG writes password to the log

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] PSPNG writes password to the log


Chronological Thread 
  • From: Jeffrey Williams <>
  • To: Ben Beecher <>
  • Cc: " Mailing List" <>
  • Subject: Re: [grouper-users] PSPNG writes password to the log
  • Date: Thu, 20 Feb 2020 13:02:23 -0500

Hi Ben,

Can you post your logging settings and which version of Grouper are you using?  UNCG is currently on tier/grouper:2.4.0-80-u51-w10-p11-20191118 and ours are being masked.

2020-01-06 15:02:03,929: [FullSyncer(pspng_personBushyLdap)-Thread] INFO  LdapSystem.buildLdapConnectionPool(95) -  - Setting up LDAP Connection with properties: {org.ldaptive.useSSL=true, org.ldaptive.ldapUrl=ldaps://somethingldaptish.uncg.edu:636, org.ldaptive.pagedResultsSize=1000, org.ldaptive.batchSize=1000, org.ldaptive.bindDn=, org.ldaptive.useStartTLS=false, org.ldaptive.bindCredential=**masked**}



On Thu, Feb 20, 2020 at 12:48 PM Ben Beecher <> wrote:
I would like to request that PSPNG be modified so that the LDAP bind credential is not written to the log file.

2020-02-20 12:00:00,216 [DefaultQuartzScheduler_Worker-6] INFO  (LdapSystem.java:92) - Setting up LDAP Connection with properties: {org.ldaptive.ldapUrl=ldap://hostname.cc.columbia.edu:389, org.ldaptive.bindDn=uni=username,ou=People,o=Columbia University,c=US, org.ldaptive.useStartTLS=true, org.ldaptive.bindCredential=<redacted>}

Ben


--
Jeffrey Williams 
Identity Engineer
Identity & Access Services
https://its.uncg.edu





Archive powered by MHonArc 2.6.19.

Top of Page