Bug 624514 - New user password is displayed in plain text in pulp.log
Summary: New user password is displayed in plain text in pulp.log
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Pulp
Classification: Retired
Component: z_other
Version: unspecified
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
: ---
Assignee: Jay Dobies
QA Contact: wes hayutin
URL:
Whiteboard:
Keywords: QA-Closed
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-08-16 17:58 UTC by Jay Dobies
Modified: 2011-07-15 19:37 UTC (History)
3 users (show)

(edit)
Clone Of:
(edit)
Last Closed: 2010-10-20 16:11:16 UTC


Attachments (Terms of Use)

Description Jay Dobies 2010-08-16 17:58:56 UTC
2010-08-16 13:51:36,661  password received is foo
2010-08-16 13:51:36,661  login jdob
2010-08-16 13:51:36,661  name 
2010-08-16 13:51:36,671  Traceback (most recent call last):

Comment 1 Pradeep Kilambi 2010-08-17 15:05:58 UTC
This bug needs more information from QA point of view.

Comment 2 Jay Dobies 2010-08-17 16:34:18 UTC
To reproduce:

- Use pulp-admin to create a new user.
- View /var/log/pulp/pulp.log on the pulp server to see the log output I originally posted. We print out the password for the user in the logs.

Comment 3 Jay Dobies 2010-08-26 14:13:40 UTC
commit	f3cf8f20101c7779e828a15706becf017acc6bc0
tree	7a8079d284a8b18c45c2d5f03df1dd776637d497


Removed plain text echo of the user's password


src/pulp/server/api/user.py

Comment 4 Preethi Thomas 2010-09-10 15:37:56 UTC
This blocked by

https://bugzilla.redhat.com/show_bug.cgi?id=623969

Comment 5 Preethi Thomas 2010-09-28 13:04:48 UTC
verified

There is no record of user create in pulp.log

Comment 6 Preethi Thomas 2010-10-20 16:11:16 UTC
Closed after review.


Note You need to log in before you can comment on or make changes to this bug.