yahoo-eng-team team mailing list archive

[Fei Long Wang <flwang@xxxxxxxxxx>]

** Also affects: glance
   Importance: Undecided
       Status: New

** Changed in: glance
       Status: New => Triaged

** Changed in: glance
   Importance: Undecided => Medium

** Changed in: glance
     Assignee: (unassigned) => Fei Long Wang (flwang)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1266590

Title:
  db connection string is cleartext in debug log

Status in OpenStack Image Registry and Delivery Service (Glance):
  Triaged
Status in OpenStack Identity (Keystone):
  In Progress
Status in Oslo - a Library of Common OpenStack Code:
  Fix Committed

Bug description:
  
  When I start up keystone-all with --debug it logs the config settings. The config setting for the database connection string is printed out:

  (keystone-all): 2014-01-06 16:32:56,983 DEBUG cfg log_opt_values
  database.connection            =
  mysql://root:rootpwd@127.0.0.1/keystone?charset=utf8

  The database connection string will typically contain the user
  password, so this value should be masked (like admin_token).

  This is a regression from Havana, which masked the db connection
  string.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1266590/+subscriptions