BUG #16848: psqlodbc_13_00_0000-x64 used for Linked Server is displaying linked server password in the DSN logs

From: PG Bug reporting form <noreply(at)postgresql(dot)org>
To: pgsql-bugs(at)lists(dot)postgresql(dot)org
Cc: joshdani1357(at)gmail(dot)com
Subject: BUG #16848: psqlodbc_13_00_0000-x64 used for Linked Server is displaying linked server password in the DSN logs
Date: 2021-02-01 23:57:55
Message-ID: 16848-129851de447f4d5d@postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

The following bug has been logged on the website:

Bug reference: 16848
Logged by: Josh Dani
Email address: joshdani1357(at)gmail(dot)com
PostgreSQL version: 13.1
Operating system: Windows
Description:

I have installed psqlodbc_13_00_0000-x64 on my SQLServer machine. I then
created a DSN (without password) to my PostgreSQL server and enabled
logging. I have created a linked server in SSMS. When I do activities on the
linked server, I see the linked server password in plain text in the logs,
in PQconnectdbParams

[8912-0.000] mylog.c[logs_on_off]274: mylog_on=2 qlog_on=2
[8912-0.000]connection[CC_connect]1108: entering...sslmode=disable
[8912-0.000]connection[LIBPQ_CC_connect]1080: entering...
[8912-0.000]connection[CC_initial_log]1028: [QLOG]Driver
Version='13.00.0000,Nov 19 2020' linking 1915 dynamic Multithread library
[8912-0.000]connection[CC_initial_log]1063: DSN = 'dsn_postgresql', server =
'****', port = '****', database = 'postgres', username = '***',
password='xxxxx'
[8912-0.000]connection[LIBPQ_connect]2761: connecting to the database using
**** as the server and pqopt={}
[8912-0.000]connection[LIBPQ_connect]2873: [QLOG]PQconnectdbParams:
host='****' port='****' dbname='postgres' user='****' sslmode='disable'
password='<Real Password is shown here>' connect_timeout=’20’

This is the problem: password='<Real Password is shown here>'

Browse pgsql-bugs by date

  From Date Subject
Next Message PG Bug reporting form 2021-02-02 10:33:17 BUG #16849: index and table data inconsistency
Previous Message GMX LINREG 2021-02-01 15:23:47 Re: BUG #16843: pg_upgrade from 12.5 to 13.1 with extension plperlu failed