yahoo-eng-team team mailing list archive

[Jay Bryant <jsbryant@xxxxxxxxxx>]

** Also affects: cinder
   Importance: Undecided
       Status: New

** Changed in: cinder
     Assignee: (unassigned) => Jay Bryant (jsbryant)

** Changed in: cinder
    Milestone: None => icehouse-3

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1266590

Title:
  db connection string is cleartext in debug log

Status in Cinder:
  New
Status in OpenStack Image Registry and Delivery Service (Glance):
  Fix Committed
Status in OpenStack Identity (Keystone):
  Fix Committed
Status in Oslo - a Library of Common OpenStack Code:
  Fix Released

Bug description:
  
  When I start up keystone-all with --debug it logs the config settings. The config setting for the database connection string is printed out:

  (keystone-all): 2014-01-06 16:32:56,983 DEBUG cfg log_opt_values
  database.connection            =
  mysql://root:rootpwd@127.0.0.1/keystone?charset=utf8

  The database connection string will typically contain the user
  password, so this value should be masked (like admin_token).

  This is a regression from Havana, which masked the db connection
  string.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cinder/+bug/1266590/+subscriptions