BUG #10680: LDAP bind password leaks to log on failed authentication

From: smsiebe(at)gmail(dot)com
To: pgsql-bugs(at)postgresql(dot)org
Subject: BUG #10680: LDAP bind password leaks to log on failed authentication
Date: 2014-06-17 17:55:11
Message-ID: 20140617175511.2589.45249@wrigleys.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

The following bug has been logged on the website:

Bug reference: 10680
Logged by: Steven Siebert
Email address: smsiebe(at)gmail(dot)com
PostgreSQL version: 9.3.4
Operating system: Linux
Description:

When a user fails to login when the LDAP method is used, the ldapbindpasswd
(in plain text) is leaked to the log, even when the log level is set to
warning.

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Jeff Janes 2014-06-17 23:17:40 Re: [BUGS] BUG #8673: Could not open file "pg_multixact/members/xxxx" on slave during hot_standby
Previous Message Michael Paquier 2014-06-17 04:43:59 Re: BUG #10674: syntax error with CREATE TABLE table AS SELECT (column1, column 2) FROM table2