Re: [[email protected]: Bug#198843: very chatty with password information]

On Thu, Jul 10, 2003 at 02:38:52PM -0500, Manuel Amador (Rudd-O) wrote:

Hi,

> As Abagnale said in Catch me if you can, I concur.  But, isn't the 
> password already obscured with asterisks?
> 

It is not, right now: first of all every single character is displayed on
the X console while typing it, and then shows it while modifying it, for
two times: in the set password function and then in the LDAP changes log.
(Altough this last one is encrypted, is password encryption is enabled
anyhow) In the forwarded message there was a log of all the three moment 
in which the password is displayed. (We are talking about the log messages 
in the console, not the User Interface). I think that at least the two
times in which it's displayed in clear should be fixed...

Thanks,

Guido



-------------------------------------------------------
This SF.Net email sponsored by: Parasoft
Error proof Web apps, automate testing & more.
Download & eval WebKing and get a free book.
www.parasoft.com/bulletproofapps1