c2c-oerpscenario team mailing list archive

["Olivier Dony \(OpenERP\)" <854785@xxxxxxxxxxxxxxxxxx>]

** Summary changed:

- [TRUNK] Whn you delete a DB psql password is printed on log
+ Database password is printed in logfile when DEBUG logging is enabled

-- 
You received this bug notification because you are a member of C2C
OERPScenario, which is subscribed to OpenERP Project Group.
https://bugs.launchpad.net/bugs/854785

Title:
  Database password is printed in logfile when DEBUG logging is enabled

Status in OpenERP Server:
  Confirmed

Bug description:
  This is a real big security issue, this information NEVER should go to
  log.

  The server is printing:
  db.connection_pool:ConnectionPool(used=0/count=0/max=64): Close all
  connections to 'port=5434 user=DBUSER password=PASSWORD dbname=tr3'

  Where "DBUSER" AND "PASSWORD" ARE THE REAL ONES.

  
  server revno: 3633.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-server/+bug/854785/+subscriptions