#449: remove cleartext password in logging
-------------------------------------------+--------------------------------
Reporter: schaubr | Owner: geonetwork-devel@…
Type: defect | Status: new
Priority: major | Milestone: v2.6.3
Component: General | Version: v2.6.2
Keywords: geonetwork, logging, password |
-------------------------------------------+--------------------------------
Currently, the passwords used by the users to login into GeoNetwork,
appear in cleartext in the (debug) logging. Especially in an environment
where users login through LDAP, this is bad practice.
Example where this happens: LDAPContext.java, line 127
--
Ticket URL: <http://trac.osgeo.org/geonetwork/ticket/449>
GeoNetwork opensource Developer website <http://sourceforge.net/projects/geonetwork/>
GeoNetwork opensource is a standards based, Free and Open Source catalog application to manage spatially referenced resources through the web. It provides powerful metadata editing and search functions as well as an embedded interactive web map viewer. This website contains information related to the development of the software.