Bug 624514 - New user password is displayed in plain text in pulp.log
Summary: New user password is displayed in plain text in pulp.log
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Pulp
Classification: Retired
Component: z_other
Version: unspecified
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
: ---
Assignee: Jay Dobies
QA Contact: wes hayutin
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-08-16 17:58 UTC by Jay Dobies
Modified: 2011-07-15 19:37 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-10-20 16:11:16 UTC
Embargoed:

Attachments (Terms of Use)

Description Jay Dobies 2010-08-16 17:58:56 UTC 
2010-08-16 13:51:36,661  password received is foo
2010-08-16 13:51:36,661  login jdob
2010-08-16 13:51:36,661  name 
2010-08-16 13:51:36,671  Traceback (most recent call last):
Comment 1 Pradeep Kilambi 2010-08-17 15:05:58 UTC 
This bug needs more information from QA point of view.
Comment 2 Jay Dobies 2010-08-17 16:34:18 UTC 
To reproduce:

- Use pulp-admin to create a new user.
- View /var/log/pulp/pulp.log on the pulp server to see the log output I originally posted. We print out the password for the user in the logs.
Comment 3 Jay Dobies 2010-08-26 14:13:40 UTC 
commit	f3cf8f20101c7779e828a15706becf017acc6bc0
tree	7a8079d284a8b18c45c2d5f03df1dd776637d497


Removed plain text echo of the user's password


src/pulp/server/api/user.py
Comment 4 Preethi Thomas 2010-09-10 15:37:56 UTC 
This blocked by

https://bugzilla.redhat.com/show_bug.cgi?id=623969
Comment 5 Preethi Thomas 2010-09-28 13:04:48 UTC 
verified

There is no record of user create in pulp.log
Comment 6 Preethi Thomas 2010-10-20 16:11:16 UTC 
Closed after review.
Note You need to log in before you can comment on or make changes to this bug.