Postgres Pro
Downloads
Home   >   mailing lists

BUG #10680: LDAP bind password leaks to log on failed authentication - Mailing list pgsql-bugs

From smsiebe@gmail.com
Subject BUG #10680: LDAP bind password leaks to log on failed authentication
Date
Msg-id 20140617175511.2589.45249@wrigleys.postgresql.org
Whole thread Raw
Responses Re: BUG #10680: LDAP bind password leaks to log on failed authentication  (Stephen Frost <sfrost@snowman.net>)
List pgsql-bugs
Tree view 
The following bug has been logged on the website:

Bug reference:      10680
Logged by:          Steven Siebert
Email address:      smsiebe@gmail.com
PostgreSQL version: 9.3.4
Operating system:   Linux
Description:

When a user fails to login when the LDAP method is used, the ldapbindpasswd
(in plain text) is leaked to the log, even when the log level is set to
warning.

pgsql-bugs by date:

Previous
From: Sean Rhea
Date:
Subject: LISTEN fails to "access status of transaction"
Next
From: Tom Lane
Date:
Subject: Re: LISTEN fails to "access status of transaction"