[RADIATOR] Hiding the LDAP Password attribute on Trace level 4 [SEC=UNCLASSIFIED]

[Keith Morrell]

UNCLASSIFIED
Thanks Alan, but this assumes local expertise with Perl and hook code so may not suit all levels of expertise.

I think a more generalise approach along the lines that Hugh was suggesting was a better and more generic approach (for the less skilled masses!), so to extend that further, it would be good to have something like a set of options for debug mode or extended debug mode (and to encompass some of the other suggestions on this trail) like:


-          Hide passwords

-          Hide (or mask) IP addresses

-          Possibly other options

I would be far more comfortable turning on and off debug options in a running Prod server rather than slotting in Perl hook code.

-Keith

From: Alan Buxey [mailto:A.L.M.Buxey at lboro.ac.uk]
Sent: Tuesday, 14 October 2014 10:15 AM
To: Keith Morrell; Vangelis Kyriakakis; Radiator
Subject: RE: [RADIATOR] Hiding the LDAP Password attribute on Trace level 4 [SEC=UNCLASSIFIED]

What info is it that you need to log/see as you can run a Perl hook that means you only log what you want, can run the system in non debug proper thread mode etc and not get passwords logged ;)

alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.open.com.au/pipermail/radiator/attachments/20141013/91d417ed/attachment-0001.html