[PATCH] Filter clearTextPassword from logs

Andrew Bartlett abartlet at samba.org
Thu Aug 14 19:16:32 MDT 2014


We go to a great deal of effort to avoid administrators posting their
passwords in Samba logs, and one of the ways we do that is to remove
them from internal ldif dumps Samba produces while operating as an AD
DC.

clearTextPassword is not a real attribute, but it functions as one for
an input path.

Please review/push

Andrew Bartlett
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba



-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-dsdb-Also-redact-the-clearTextPassword-input-only-at.patch
Type: text/x-patch
Size: 1267 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20140815/787f2fd1/attachment.bin>


More information about the samba-technical mailing list