Re: Audit log - clear text password in user changes

[Rich Megginson <rmeggins@xxxxxxxxxx>]

On 04/04/2012 08:42 AM, Alberto Viana wrote:

I have an 389 DS (version 1.2.10.2)  with AD replication and I enabled the audit log, but when I change a user password, shows the unhashed password in the audit log file:

time: 20120404113336

dn: uid=alberto.viana,OU=G,OU=RJ,dc=my,dc=domain

changetype: modify

replace: userPassword

userPassword: {SSHA}bqBSVbLJpqKCujEC2JC4ysaUUJuTsFe87AoPsQ==

-

replace: modifiersname

modifiersname: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoo

 t

-

replace: modifytimestamp

modifytimestamp: 20120404143336Z

-

replace: unhashed#user#password

unhashed#user#password: maisumteste

-

Is the expected behavior?

Yes.

Can I configure to just not show the unhashed password?

No

Because I need the audit log.

Please file a ticket at https://fedorahosted.org/389

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users